(Click on the bars or line points for details on the relevant issues.)
The server responded with a non 200 (OK) nor 404 (Not Found) status code. This is a non-issue, however exotic HTTP response status codes can provide useful insights into the behavior of the web application and assist with the penetration test.
| Vector type | HTTP method | Action | |
|---|---|---|---|
server
|
GET
|
http://b3789e93786d.ngrok.io/index.php | |
server
|
POST
|
http://b3789e93786d.ngrok.io/admin/employees | |
server
|
PUT
|
http://b3789e93786d.ngrok.io/password/reset/Arachni-dc1fd3348d199f5e66655a1b9ebcc24e | |
server
|
POST
|
http://b3789e93786d.ngrok.io/admin/permissions | |
server
|
POST
|
http://b3789e93786d.ngrok.io/admin/permissions/1 | |
server
|
POST
|
http://b3789e93786d.ngrok.io/admin/roles | |
server
|
POST
|
http://b3789e93786d.ngrok.io/admin/users | |
server
|
GET
|
http://b3789e93786d.ngrok.io/admin/services/Copy%20of%20Copy%20of%20services./ab1eb814e8cb92c02ca86ed02a582b7ba2f5c864 | |
server
|
PUT
|
http://b3789e93786d.ngrok.io/admin/services/Arachni-dc1fd3348d199f5e66655a1b9ebcc24e | |
server
|
GET
|
http://b3789e93786d.ngrok.io/admin | |
server
|
POST
|
http://b3789e93786d.ngrok.io/logout | |
server
|
GET
|
http://b3789e93786d.ngrok.io/home | |
server
|
OPTIONS
|
http://b3789e93786d.ngrok.io/ | |
server
|
GET
|
http://b3789e93786d.ngrok.io/login |
A common practice when administering web applications is to create a copy/backup
of a particular directory prior to making any modification.
Another common practice is to add an extension or change the name of the original
directory to signify that it is a backup (examples include .bak, .orig, .backup,
etc.).
During the initial recon stages of an attack, cyber-criminals will attempt to locate backup directories by adding common extensions onto directories already discovered on the webserver. By analysing the response headers from the server they are able to determine if a backup directory exists. These backup directories can then assist in the compromise of the web application.
By utilising the same method, Arachni was able to discover a possible backup directory.
Many web applications do not properly protect sensitive data, such as credit cards, tax IDs, and authentication credentials. Attackers may steal or modify such weakly protected data to conduct credit card fraud, identity theft, or other crimes. Sensitive data deserves extra protection such as encryption at rest or in transit, as well as special precautions when exchanged with the browser. OWASP
A common practice when administering web applications is to create a copy/backup
of a particular directory prior to making any modification.
Another common practice is to add an extension or change the name of the original
directory to signify that it is a backup (examples include .bak, .orig, .backup,
etc.).
During the initial recon stages of an attack, cyber-criminals will attempt to locate backup directories by adding common extensions onto directories already discovered on the webserver. By analysing the response headers from the server they are able to determine if a backup directory exists. These backup directories can then assist in the compromise of the web application.
By utilising the same method, Arachni was able to discover a possible backup directory.
allowed_methods, backdoors, backup_directories, backup_files, csrf, htaccess_limit, html_objects, http_only_cookies, http_put, insecure_client_access_policy, insecure_cookies, insecure_cors_policy, insecure_cross_domain_policy_access, insecure_cross_domain_policy_headers, interesting_responses, path_traversal
uniformity
{}
autothrottle
{}
autologin
{"url"=>"http://b3789e93786d.ngrok.io/", "check"=>"logout", "parameters"=>"email=admin@admin.com&password=password"}
healthmap
{}
timing_attacks
{}
discovery
{}
"parameter_values"
|
true
|
|---|---|
"exclude_vector_patterns"
|
[]
|
"include_vector_patterns"
|
[]
|
"link_templates"
|
[]
|
"local_storage"
|
{}
|
|---|---|
"wait_for_elements"
|
{}
|
"pool_size"
|
6
|
"job_timeout"
|
25
|
"worker_time_to_live"
|
100
|
"ignore_images"
|
false
|
"screen_width"
|
1600
|
"screen_height"
|
1200
|
"report_path"
|
nil
|
|---|---|
"token"
|
"f1247dfee641c1a7ed953f5770bfd144"
|
"user_agent"
|
"Arachni/v2.0dev"
|
|---|---|
"request_timeout"
|
10000
|
"request_redirect_limit"
|
5
|
"request_concurrency"
|
20
|
"request_queue_size"
|
100
|
"request_headers"
|
{}
|
"response_max_size"
|
500000
|
"cookies"
|
{}
|
"authentication_type"
|
"auto"
|
"values"
|
{}
|
||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
"default_values"
|
|
||||||||||||||||||||
"without_defaults"
|
false
|
||||||||||||||||||||
"force"
|
false
|
"redundant_path_patterns"
|
{}
|
|---|---|
"dom_depth_limit"
|
5
|
"exclude_file_extensions"
|
[]
|
"exclude_path_patterns"
|
[]
|
"exclude_content_patterns"
|
[]
|
"include_path_patterns"
|
[]
|
"restrict_paths"
|
[]
|
"extend_paths"
|
[]
|
"url_rewrites"
|
{}
|
"check_url"
|
"http://b3789e93786d.ngrok.io/admin"
|
|---|---|
"check_pattern"
|
"(?-mix:logout)"
|
At the time these issues were logged there were no abnormal
interferences or anomalous server behavior.
These issues are considered trusted and accurate.
The server responded with a non 200 (OK) nor 404 (Not Found) status code. This is a non-issue, however exotic HTTP response status codes can provide useful insights into the behavior of the web application and assist with the penetration test.
server
using
GET
at
http://b3789e93786d.ngrok.io/index.php
pointing to
http://b3789e93786d.ngrok.io/index.php
.
| Type | In | Action |
|---|---|---|
server |
http://b3789e93786d.ngrok.io/index.php | http://b3789e93786d.ngrok.io/index.php |
Raw HTTP request used to retrieve the page.
GET /index.php HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6IjFubTZvdWpkRkRRWE10RGNiam5qd1E9PSIsInZhbHVlIjoiYXNSdDNuVWQ1YldXYmt0YXIwS3hKNnZtblZncUkxQTVSVFdOSTFGWnFQZXpacG41NlI0NVhidjRaZWJzNUJic2EyOTd5d0RRaGMzaDlUTHVNM25pbUh2TUYrZ203ZjM4XC8zb1BmU1AwZWNrRUQxS2hUQkxLZWhUXC9mWHNBQ2h5UCIsIm1hYyI6IjY2ODFhY2E0YmQyN2E4MjczNDlkMGMwNTQ4ZTE5NDlkYjQ3NzliNWFhZjVkMTM1Nzk2NmJmMzJiNTUwODMyODgifQ%3D%3D;laravel_session=eyJpdiI6InpJcWM4ZkFNaU45b2xPQzRaWFwvYVpnPT0iLCJ2YWx1ZSI6ImVDckhzeU11UlFIXC85MDRkZUZRb2ttdldKcWF2UWVpOGRYdkVvalpXNHU0WXorSXFJMitrNWlmQmpmcnM4R2hZMlBROTFBdjMzSkxYUHZiZGFpdHl0NmZ4RUZFT29YTnRXbzNXU052a2NpR2Y1NGZSVFNnYWpoQkd2cnlWdEtwYiIsIm1hYyI6ImFkZWQ2OWMxMzcxMzkxN2ZjYjhmZjJkN2MwMGUzNTAxMWZhMzBmODJlNjhhMTVkMGE4YmRjMzM5MGU0MWQ5YzcifQ%3D%3D
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 14:33:04 GMT
Location: /login
Set-Cookie: XSRF-TOKEN=eyJpdiI6IlZnbmo4WkNLSzA2RVRTYnM1VWFmYlE9PSIsInZhbHVlIjoiXC9HZDJ0SXJ1N0syRDIwd1wvSnZza0NIMndKU0FiSmRPTXNmMjlnU2s3a3Q2MVlPWlNQRWVNY25CQ2RcL09SRDcxWUtJaVNLdzdjdHNkY0tBNElwT01PckFuUWxRYm83MW5NU2VhckZHWEE5bUNnd09qWnlMb01rTzJRMThzOGRtVEkiLCJtYWMiOiI5MzY3M2UzN2U4NmViN2JkN2IwOGI2MjcwNDZlY2Q4NjEwNGVhNzgwMmM4ZjQ3NzYwMjI1OTQ3ZmQwMTk3ZDIyIn0%3D; expires=Mon, 02-Nov-2020 16:33:04 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6IjNDZnh0MVNoMkRzdlF2XC8zekJwWllnPT0iLCJ2YWx1ZSI6IkxiZGtqaUpuK1BPRFl2YnZWc2E0RUlLQ1orY2Z6OEl2cUtFZGVoQmNDTytLd2Nxcm1abWRCYUlTd3h2bUFvQWdraGU5MU8yN3ZyWG0yWW40V1dVV1F5MVVNbW5sdEkyKzNxY21peEZxUWxSd0lZSzk2a3AwNTg2aHZXdGpQcllKIiwibWFjIjoiZDUzNWZlMjUyZmUwMGYzY2Q3NmJmYjQwNmJhNTEzMjA3OTMxNzNkM2ZlZTVhMmJiNjgyNDZiODI3MGMxNWYzYiJ9; expires=Mon, 02-Nov-2020 16:33:04 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='/login'" />
<title>Redirecting to /login</title>
</head>
<body>
Redirecting to <a href="/login">/login</a>.
</body>
</html>
Raw HTTP request used to retrieve the page.
GET / HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:18:50 GMT
Location: /login
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='/login'" />
<title>Redirecting to /login</title>
</head>
<body>
Redirecting to <a href="/login">/login</a>.
</body>
</html>
server
using
POST
at
http://b3789e93786d.ngrok.io/admin/employees
pointing to
http://b3789e93786d.ngrok.io/admin/employees
.
| Type | In | Action |
|---|---|---|
server |
http://b3789e93786d.ngrok.io/admin/employees | http://b3789e93786d.ngrok.io/admin/employees |
Raw HTTP request used to retrieve the page.
POST /admin/employees HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Referer: http://b3789e93786d.ngrok.io/admin/employees/create Origin: http://b3789e93786d.ngrok.io Content-Type: multipart/form-data; boundary=----WebKitFormBoundarytLH6jR4BBOrUFBZv Content-Length: 452 Cookie: XSRF-TOKEN=eyJpdiI6IlBoZzVyQ003ckpFbmJISjJFZ2k5NFE9PSIsInZhbHVlIjoibnVZRUpWT0NLQlN5eDdzQjNlSjhHS3VhNEtseDZVRnl2ZDh1cDBTWVc4YnM0TWtaSW1pcEYxdEg5WCtrUDJ0b0hXdHZJaUhpXC9weDV3c2Y3XC9vQmJBMStiSEhKZ3FSWTJBTytRS0twXC91VHRIVEhKVXB5dVdMVHZoRWlhdndaMlUiLCJtYWMiOiIxZjkyNmRiYTVjMzk1NWZmYzUyZGNjNGQ1ZTdjZDA3MmFkMmE1ZmZkNTQ1NGFhNTZjYjE2ZGFiYTg4YWJjNDY5In0%3D;laravel_session=eyJpdiI6IlljNU1peXJGQ0xwQ2RtODgzMm5DTnc9PSIsInZhbHVlIjoiWWZBb014aFlNSVNZbzd2dzRFQ29JVU0zdmVTSUhoXC9JQUxiK29ZR2xvNXdwOGt0a29XNVgzcG81UjNkd3F3OTZOK0xKdHJDN2N0Z0tKZk1yVWJuY0lMMENoYUM2bHo3Zzg0d1d5cjF5SkVnNE1HbU5LUjJrM21QRmNlUzB0WXB4IiwibWFjIjoiYWIxY2NlYWVjNjgzNGNiYThjZDUyZTM1YmZiN2Y5ZGM5ZDhkZDE3ZTk3YWU4YTAzNzkxMjRiMTdiYTJiODUyYSJ9 Accept-Language: en-US,* Host: b3789e93786d.ngrok.io ------WebKitFormBoundarytLH6jR4BBOrUFBZv Content-Disposition: form-data; name="_token" YlDDpNKK2wjS7cq5nR4MQ02Gw2GoHY7zVRfLJMb0 ------WebKitFormBoundarytLH6jR4BBOrUFBZv Content-Disposition: form-data; name="name" ------WebKitFormBoundarytLH6jR4BBOrUFBZv Content-Disposition: form-data; name="email" ------WebKitFormBoundarytLH6jR4BBOrUFBZv Content-Disposition: form-data; name="phone" ------WebKitFormBoundarytLH6jR4BBOrUFBZv--
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 13:33:44 GMT
Location: http://b3789e93786d.ngrok.io/admin/employees/create
Set-Cookie: XSRF-TOKEN=eyJpdiI6InRpSlhBOHh0VEFHSjRyaDRYXC9kXC9Hdz09IiwidmFsdWUiOiJGenhZVFwvOVFIdTVpTjJLZm9tdlBMZHRwRWdkanp0MzZkZTEyeEFoZHRwaHJIMWpDUEJRcFNjM0ZBM0tIczA0V2FxeFdsVmZwdGZUZlM0TnNZZU9XXC9hYmtBNTlvVkoyc0k2dWxTS0hLaVwvelBZQlhtWkpkd3JyNGxIZ04wem4wVSIsIm1hYyI6ImE1ZTQxNGI5ZGRhMzVkMzBjMjA5MTVjMTI3N2JlOGFjYjE3NzBkMWUyODRkZGZkN2UyNDU3YjZlODk5NDBkNTMifQ%3D%3D; expires=Mon, 02-Nov-2020 15:33:44 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6ImlSWFdsS1BBN2ZyQVRLRGVYTE1GTFE9PSIsInZhbHVlIjoiNlRJRWVWSnBcL1JuUjlmS3liS0dpUjc1RmlwU2l2Q1RPRGJWQ0hrNlpRdFgza1oyYkZpdGliS3craHZudGlidEtaRUZQOGZaZHlCZzZJYWVmWTE3QzhRajlmaWhhYnl4dlVyNDlXbDlCcUIwWTVqMlg1MkNXaXlVcHVZekdIU0s3IiwibWFjIjoiN2JkNzhmNDczNDM1NTRmY2Q5YjYyZTA1N2NkZTE3MGVjZTJkMTQxYzA3Y2M2MzM4MDc3ZDYxZTVhZDlkNzExYSJ9; expires=Mon, 02-Nov-2020 15:33:44 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='http://b3789e93786d.ngrok.io/admin/employees/create'" />
<title>Redirecting to http://b3789e93786d.ngrok.io/admin/employees/create</title>
</head>
<body>
Redirecting to <a href="http://b3789e93786d.ngrok.io/admin/employees/create">http://b3789e93786d.ngrok.io/admin/employees/create</a>.
</body>
</html>
Raw HTTP request used to retrieve the page.
GET / HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:18:50 GMT
Location: /login
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='/login'" />
<title>Redirecting to /login</title>
</head>
<body>
Redirecting to <a href="/login">/login</a>.
</body>
</html>
server
using
PUT
at
http://b3789e93786d.ngrok.io/password/reset/Arachni-dc1fd3348d199f5e66655a1b9ebcc24e
pointing to
http://b3789e93786d.ngrok.io/password/reset/Arachni-dc1fd3348d199f5e66655a1b9ebcc24e
.
Raw HTTP request used to retrieve the page.
PUT /password/reset/Arachni-dc1fd3348d199f5e66655a1b9ebcc24e HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6Ik1QSThTc2x0UnVyVWJxdTJHQm1GV3c9PSIsInZhbHVlIjoibUw4Qkw5ZUtCR0FMK3c5XC9IVU1tdjBYdnlsZkh4ZGdMOXdyaFdVTDFTbCtNYnZXeWtyWTNNdERndGE1S2VKSFFJcmViSm9tc3BNWGNoM2VtKytMdWZ3NzAzN0JyUFJ4NFJJVHVNbjAzVkZCdjVVbUNYU25hR3BDZkJIS09zOHZNIiwibWFjIjoiMzY3MzZmYWRlY2ZhOGIwZTVhYzE4MTBhZTZmYjY3NmMxZWFhMjNiMDAxODczYWUwZTg0MjJiY2E1YjI1Mzc0MyJ9;laravel_session=eyJpdiI6IkJVaDU1MTZRR0JyUng0Z1hydWs1Y0E9PSIsInZhbHVlIjoiUGlndUtzWXhoUzZYZEhjZ3E2MmNMdlwvMjVvMlJGTW1iSWxWazBFSzJTdzV1bDNPaDdTazdKRisrdlwvdDRVWE9IYk9LcXg5SE83VUNvdHRXUENxNm44ZkJQQ0xMcGhOWFNnaGZcL20ySlwvdXNUSUZkSDArS0hGMXZLaHQ0S3hDZ3N4IiwibWFjIjoiZjIzOTlhZmEyNGZhZjc5MjAyZjQ5MmMwYmE1MGI2MjZiNTVkMjBmNTNlY2I1ZjY0ODJiNDZhZGI2ZDFhYTEyZiJ9 Content-Length: 55 Expect: 100-continue Created by Arachni. PUTdc1fd3348d199f5e66655a1b9ebcc24e
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 100 Continue
HTTP/1.1 405 Method Not Allowed
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
allow: GET, HEAD
Cache-Control: no-cache, private
date: Mon, 02 Nov 2020 13:40:12 GMT
<!doctype html>
<html class="theme-light">
<!--
Symfony\Component\HttpKernel\Exception\MethodNotAllowedHttpException: The PUT method is not supported for this route. Supported methods: GET, HEAD. in file /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/RouteCollection.php on line 256
#0 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/RouteCollection.php(242): Illuminate\Routing\RouteCollection->methodNotAllowed()
#1 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/RouteCollection.php(176): Illuminate\Routing\RouteCollection->getRouteForMethods()
#2 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/Router.php(635): Illuminate\Routing\RouteCollection->match()
#3 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/Router.php(624): Illuminate\Routing\Router->findRoute()
#4 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/Router.php(613): Illuminate\Routing\Router->dispatchToRoute()
#5 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(170): Illuminate\Routing\Router->dispatch()
#6 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(130): Illuminate\Foundation\Http\Kernel->Illuminate\Foundation\Http\{closure}()
#7 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/TransformsRequest.php(21): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#8 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(171): Illuminate\Foundation\Http\Middleware\TransformsRequest->handle()
#9 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/CheckForMaintenanceMode.php(63): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#10 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(171): Illuminate\Foundation\Http\Middleware\CheckForMaintenanceMode->handle()
#11 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/ValidatePostSize.php(27): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#12 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(171): Illuminate\Foundation\Http\Middleware\ValidatePostSize->handle()
#13 /home/vagrant/ProjectLaravel/vendor/fideloper/proxy/src/TrustProxies.php(57): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#14 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(171): Fideloper\Proxy\TrustProxies->handle()
#15 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/TransformsRequest.php(21): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#16 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(171): Illuminate\Foundation\Http\Middleware\TransformsRequest->handle()
#17 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(105): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#18 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(145): Illuminate\Pipeline\Pipeline->then()
#19 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(110): Illuminate\Foundation\Http\Kernel->sendRequestThroughRouter()
#20 /home/vagrant/ProjectLaravel/public/index.php(55): Illuminate\Foundation\Http\Kernel->handle()
#21 {main}
-->
<head>
<!-- Hide dumps asap -->
<style>
pre.sf-dump {
display: none !important;
}
</style>
<meta charset="UTF-8">
<meta name="viewport"
content="width=device-width, initial-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="robots" content="noindex, nofollow">
<title>🧨 The PUT method is not supported for this route. Supported methods: GET, HEAD.</title>
</head>
<body class="scrollbar-lg">
<script>
window.data = {"report":{"notifier":"Laravel Client","language":"PHP","framework_version":"6.20.2","language_version":"7.4.11","exception_class":"Symfony\\Component\\HttpKernel\\Exception\\MethodNotAllowedHttpException","seen_at":1604324412,"message":"The PUT method is not supported for this route. Supported methods: GET, HEAD.","glows":[],"solutions":[],"stacktrace":[{"line_number":256,"method":"methodNotAllowed","class":"Illuminate\\Routing\\RouteCollection","code_snippet":{"241":"","242":" $this-\u003EmethodNotAllowed($methods, $request-\u003Emethod());","243":" }","244":"","245":" \/**","246":" * Throw a method not allowed HTTP exception.","247":" *","248":" * @param array $others","249":" * @param string $method","250":" * @return void","251":" *","252":" * @throws \\Symfony\\Component\\HttpKernel\\Exception\\MethodNotAllowedHttpException","253":" *\/","254":" protected function methodNotAllowed(array $others, $method)","255":" {","256":" throw new MethodNotAllowedHttpException(","257":" $others,","258":" sprintf(","259":" \u0027The %s method is not supported for this route. Supported methods: %s.\u0027,","260":" $method,","261":" implode(\u0027, \u0027, $others)","262":" )","263":" );","264":" }","265":"","266":" \/**","267":" * Get routes from the collection by method.","268":" *","269":" * @param string|null $method","270":" * @return array","271":" *\/"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Routing\/RouteCollection.php","is_application_frame":false},{"line_number":242,"method":"getRouteForMethods","class":"Illuminate\\Routing\\RouteCollection","code_snippet":{"227":" *","228":" * @param \\Illuminate\\Http\\Request $request","229":" * @param array $methods","230":" * @return \\Illuminate\\Routing\\Route","231":" *","232":" * @throws \\Symfony\\Component\\HttpKernel\\Exception\\MethodNotAllowedHttpException","233":" *\/","234":" protected function getRouteForMethods($request, array $methods)","235":" {","236":" if ($request-\u003Emethod() === \u0027OPTIONS\u0027) {","237":" return (new Route(\u0027OPTIONS\u0027, $request-\u003Epath(), function () use ($methods) {","238":" return new Response(\u0027\u0027, 200, [\u0027Allow\u0027 =\u003E implode(\u0027,\u0027, $methods)]);","239":" }))-\u003Ebind($request);","240":" }","241":"","242":" $this-\u003EmethodNotAllowed($methods, $request-\u003Emethod());","243":" }","244":"","245":" \/**","246":" * Throw a method not allowed HTTP exception.","247":" *","248":" * @param array $others","249":" * @param string $method","250":" * @return void","251":" *","252":" * @throws \\Symfony\\Component\\HttpKernel\\Exception\\MethodNotAllowedHttpException","253":" *\/","254":" protected function methodNotAllowed(array $others, $method)","255":" {","256":" throw new MethodNotAllowedHttpException(","257":" $others,"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Routing\/RouteCollection.php","is_application_frame":false},{"line_number":176,"method":"match","class":"Illuminate\\Routing\\RouteCollection","code_snippet":{"161":" \/\/ First, we will see if we can find a matching route for this current request","162":" \/\/ method. If we can, great, we can just return it so that it can be called","163":" \/\/ by the consumer. Otherwise we will check for routes with another verb.","164":" $route = $this-\u003EmatchAgainstRoutes($routes, $request);","165":"","166":" if (! is_null($route)) {","167":" return $route-\u003Ebind($request);","168":" }","169":"","170":" \/\/ If no route was found we will now check if a matching route is specified by","171":" \/\/ another HTTP verb. If it is we will need to throw a MethodNotAllowed and","172":" \/\/ inform the user agent of which HTTP verb it should use for this route.","173":" $others = $this-\u003EcheckForAlternateVerbs($request);","174":"","175":" if (count($others) \u003E 0) {","176":" return $this-\u003EgetRouteForMethods($request, $others);","177":" }","178":"","179":" throw new NotFoundHttpException;","180":" }","181":"","182":" \/**","183":" * Determine if a route in the array matches the request.","184":" *","185":" * @param array $routes","186":" * @param \\Illuminate\\Http\\Request $request","187":" * @param bool $includingMethod","188":" * @return \\Illuminate\\Routing\\Route|null","189":" *\/","190":" protected function matchAgainstRoutes(array $routes, $request, $includingMethod = true)","191":" {"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Routing\/RouteCollection.php","is_application_frame":false},{"line_number":635,"method":"findRoute","class":"Illuminate\\Routing\\Router","code_snippet":{"620":" * @return \\Symfony\\Component\\HttpFoundation\\Response","621":" *\/","622":" public function dispatchToRoute(Request $request)","623":" {","624":" return $this-\u003ErunRoute($request, $this-\u003EfindRoute($request));","625":" }","626":"","627":" \/**","628":" * Find the route matching a given request.","629":" *","630":" * @param \\Illuminate\\Http\\Request $request","631":" * @return \\Illuminate\\Routing\\Route","632":" *\/","633":" protected function findRoute($request)","634":" {","635":" $this-\u003Ecurrent = $route = $this-\u003Eroutes-\u003Ematch($request);","636":"","637":" $this-\u003Econtainer-\u003Einstance(Route::class, $route);","638":"","639":" return $route;","640":" }","641":"","642":" \/**","643":" * Return the response for the given route.","644":" *","645":" * @param \\Illuminate\\Http\\Request $request","646":" * @param \\Illuminate\\Routing\\Route $route","647":" * @return \\Symfony\\Component\\HttpFoundation\\Response","648":" *\/","649":" protected function runRoute(Request $request, Route $route)","650":" {"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Routing\/Router.php","is_application_frame":false},{"line_number":624,"method":"dispatchToRoute","class":"Illuminate\\Routing\\Router","code_snippet":{"609":" public function dispatch(Request $request)","610":" {","611":" $this-\u003EcurrentRequest = $request;","612":"","613":" return $this-\u003EdispatchToRoute($request);","614":" }","615":"","616":" \/**","617":" * Dispatch the request to a route and return the response.","618":" *","619":" * @param \\Illuminate\\Http\\Request $request","620":" * @return \\Symfony\\Component\\HttpFoundation\\Response","621":" *\/","622":" public function dispatchToRoute(Request $request)","623":" {","624":" return $this-\u003ErunRoute($request, $this-\u003EfindRoute($request));","625":" }","626":"","627":" \/**","628":" * Find the route matching a given request.","629":" *","630":" * @param \\Illuminate\\Http\\Request $request","631":" * @return \\Illuminate\\Routing\\Route","632":" *\/","633":" protected function findRoute($request)","634":" {","635":" $this-\u003Ecurrent = $route = $this-\u003Eroutes-\u003Ematch($request);","636":"","637":" $this-\u003Econtainer-\u003Einstance(Route::class, $route);","638":"","639":" return $route;"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Routing\/Router.php","is_application_frame":false},{"line_number":613,"method":"dispatch","class":"Illuminate\\Routing\\Router","code_snippet":{"598":" $route = tap($this-\u003Eroutes-\u003EgetByName($name))-\u003Ebind($this-\u003EcurrentRequest);","599":"","600":" return $this-\u003ErunRoute($this-\u003EcurrentRequest, $route);","601":" }","602":"","603":" \/**","604":" * Dispatch the request to the application.","605":" *","606":" * @param \\Illuminate\\Http\\Request $request","607":" * @return \\Symfony\\Component\\HttpFoundation\\Response","608":" *\/","609":" public function dispatch(Request $request)","610":" {","611":" $this-\u003EcurrentRequest = $request;","612":"","613":" return $this-\u003EdispatchToRoute($request);","614":" }","615":"","616":" \/**","617":" * Dispatch the request to a route and return the response.","618":" *","619":" * @param \\Illuminate\\Http\\Request $request","620":" * @return \\Symfony\\Component\\HttpFoundation\\Response","621":" *\/","622":" public function dispatchToRoute(Request $request)","623":" {","624":" return $this-\u003ErunRoute($request, $this-\u003EfindRoute($request));","625":" }","626":"","627":" \/**","628":" * Find the route matching a given request."},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Routing\/Router.php","is_application_frame":false},{"line_number":170,"method":"Illuminate\\Foundation\\Http\\{closure}","class":"Illuminate\\Foundation\\Http\\Kernel","code_snippet":{"155":" if (! $this-\u003Eapp-\u003EhasBeenBootstrapped()) {","156":" $this-\u003Eapp-\u003EbootstrapWith($this-\u003Ebootstrappers());","157":" }","158":" }","159":"","160":" \/**","161":" * Get the route dispatcher callback.","162":" *","163":" * @return \\Closure","164":" *\/","165":" protected function dispatchToRouter()","166":" {","167":" return function ($request) {","168":" $this-\u003Eapp-\u003Einstance(\u0027request\u0027, $request);","169":"","170":" return $this-\u003Erouter-\u003Edispatch($request);","171":" };","172":" }","173":"","174":" \/**","175":" * Call the terminate method on any terminable middleware.","176":" *","177":" * @param \\Illuminate\\Http\\Request $request","178":" * @param \\Illuminate\\Http\\Response $response","179":" * @return void","180":" *\/","181":" public function terminate($request, $response)","182":" {","183":" $this-\u003EterminateMiddleware($request, $response);","184":"","185":" $this-\u003Eapp-\u003Eterminate();"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Foundation\/Http\/Kernel.php","is_application_frame":false},{"line_number":130,"method":"Illuminate\\Pipeline\\{closure}","class":"Illuminate\\Pipeline\\Pipeline","code_snippet":{"115":" return $this-\u003Ethen(function ($passable) {","116":" return $passable;","117":" });","118":" }","119":"","120":" \/**","121":" * Get the final piece of the Closure onion.","122":" *","123":" * @param \\Closure $destination","124":" * @return \\Closure","125":" *\/","126":" protected function prepareDestination(Closure $destination)","127":" {","128":" return function ($passable) use ($destination) {","129":" try {","130":" return $destination($passable);","131":" } catch (Exception $e) {","132":" return $this-\u003EhandleException($passable, $e);","133":" } catch (Throwable $e) {","134":" return $this-\u003EhandleException($passable, new FatalThrowableError($e));","135":" }","136":" };","137":" }","138":"","139":" \/**","140":" * Get a Closure that represents a slice of the application onion.","141":" *","142":" * @return \\Closure","143":" *\/","144":" protected function carry()","145":" {"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Pipeline\/Pipeline.php","is_application_frame":false},{"line_number":21,"method":"handle","class":"Illuminate\\Foundation\\Http\\Middleware\\TransformsRequest","code_snippet":{"6":"use Symfony\\Component\\HttpFoundation\\ParameterBag;","7":"","8":"class TransformsRequest","9":"{","10":" \/**","11":" * Handle an incoming request.","12":" *","13":" * @param \\Illuminate\\Http\\Request $request","14":" * @param \\Closure $next","15":" * @return mixed","16":" *\/","17":" public function handle($request, Closure $next)","18":" {","19":" $this-\u003Eclean($request);","20":"","21":" return $next($request);","22":" }","23":"","24":" \/**","25":" * Clean the request\u0027s data.","26":" *","27":" * @param \\Illuminate\\Http\\Request $request","28":" * @return void","29":" *\/","30":" protected function clean($request)","31":" {","32":" $this-\u003EcleanParameterBag($request-\u003Equery);","33":"","34":" if ($request-\u003EisJson()) {","35":" $this-\u003EcleanParameterBag($request-\u003Ejson());","36":" } elseif ($request-\u003Erequest !== $request-\u003Equery) {"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Foundation\/Http\/Middleware\/TransformsRequest.php","is_application_frame":false},{"line_number":171,"method":"Illuminate\\Pipeline\\{closure}","class":"Illuminate\\Pipeline\\Pipeline","code_snippet":{"156":"","157":" \/\/ If the pipe is a string we will parse the string and resolve the class out","158":" \/\/ of the dependency injection container. We can then build a callable and","159":" \/\/ execute the pipe function giving in the parameters that are required.","160":" $pipe = $this-\u003EgetContainer()-\u003Emake($name);","161":"","162":" $parameters = array_merge([$passable, $stack], $parameters);","163":" } else {","164":" \/\/ If the pipe is already an object we\u0027ll just make a callable and pass it to","165":" \/\/ the pipe as-is. There is no need to do any extra parsing and formatting","166":" \/\/ since the object we\u0027re given was already a fully instantiated object.","167":" $parameters = [$passable, $stack];","168":" }","169":"","170":" $carry = method_exists($pipe, $this-\u003Emethod)","171":" ? $pipe-\u003E{$this-\u003Emethod}(...$parameters)","172":" : $pipe(...$parameters);","173":"","174":" return $this-\u003EhandleCarry($carry);","175":" } catch (Exception $e) {","176":" return $this-\u003EhandleException($passable, $e);","177":" } catch (Throwable $e) {","178":" return $this-\u003EhandleException($passable, new FatalThrowableError($e));","179":" }","180":" };","181":" };","182":" }","183":"","184":" \/**","185":" * Parse full pipe string to get name and parameters.","186":" *"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Pipeline\/Pipeline.php","is_application_frame":false},{"line_number":63,"method":"handle","class":"Illuminate\\Foundation\\Http\\Middleware\\CheckForMaintenanceMode","code_snippet":{"48":" {","49":" if ($this-\u003Eapp-\u003EisDownForMaintenance()) {","50":" $data = json_decode(file_get_contents($this-\u003Eapp-\u003EstoragePath().\u0027\/framework\/down\u0027), true);","51":"","52":" if (isset($data[\u0027allowed\u0027]) \u0026\u0026 IpUtils::checkIp($request-\u003Eip(), (array) $data[\u0027allowed\u0027])) {","53":" return $next($request);","54":" }","55":"","56":" if ($this-\u003EinExceptArray($request)) {","57":" return $next($request);","58":" }","59":"","60":" throw new MaintenanceModeException($data[\u0027time\u0027], $data[\u0027retry\u0027], $data[\u0027message\u0027]);","61":" }","62":"","63":" return $next($request);","64":" }","65":"","66":" \/**","67":" * Determine if the request has a URI that should be accessible in maintenance mode.","68":" *","69":" * @param \\Illuminate\\Http\\Request $request","70":" * @return bool","71":" *\/","72":" protected function inExceptArray($request)","73":" {","74":" foreach ($this-\u003Eexcept as $except) {","75":" if ($except !== \u0027\/\u0027) {","76":" $except = trim($except, \u0027\/\u0027);","77":" }","78":""},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Foundation\/Http\/Middleware\/CheckForMaintenanceMode.php","is_application_frame":false},{"line_number":171,"method":"Illuminate\\Pipeline\\{closure}","class":"Illuminate\\Pipeline\\Pipeline","code_snippet":{"156":"","157":" \/\/ If the pipe is a string we will parse the string and resolve the class out","158":" \/\/ of the dependency injection container. We can then build a callable and","159":" \/\/ execute the pipe function giving in the parameters that are required.","160":" $pipe = $this-\u003EgetContainer()-\u003Emake($name);","161":"","162":" $parameters = array_merge([$passable, $stack], $parameters);","163":" } else {","164":" \/\/ If the pipe is already an object we\u0027ll just make a callable and pass it to","165":" \/\/ the pipe as-is. There is no need to do any extra parsing and formatting","166":" \/\/ since the object we\u0027re given was already a fully instantiated object.","167":" $parameters = [$passable, $stack];","168":" }","169":"","170":" $carry = method_exists($pipe, $this-\u003Emethod)","171":" ? $pipe-\u003E{$this-\u003Emethod}(...$parameters)","172":" : $pipe(...$parameters);","173":"","174":" return $this-\u003EhandleCarry($carry);","175":" } catch (Exception $e) {","176":" return $this-\u003EhandleException($passable, $e);","177":" } catch (Throwable $e) {","178":" return $this-\u003EhandleException($passable, new FatalThrowableError($e));","179":" }","180":" };","181":" };","182":" }","183":"","184":" \/**","185":" * Parse full pipe string to get name and parameters.","186":" *"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Pipeline\/Pipeline.php","is_application_frame":false},{"line_number":27,"method":"handle","class":"Illuminate\\Foundation\\Http\\Middleware\\ValidatePostSize","code_snippet":{"12":" *","13":" * @param \\Illuminate\\Http\\Request $request","14":" * @param \\Closure $next","15":" * @return mixed","16":" *","17":" * @throws \\Illuminate\\Http\\Exceptions\\PostTooLargeException","18":" *\/","19":" public function handle($request, Closure $next)","20":" {","21":" $max = $this-\u003EgetPostMaxSize();","22":"","23":" if ($max \u003E 0 \u0026\u0026 $request-\u003Eserver(\u0027CONTENT_LENGTH\u0027) \u003E $max) {","24":" throw new PostTooLargeException;","25":" }","26":"","27":" return $next($request);","28":" }","29":"","30":" \/**","31":" * Determine the server \u0027post_max_size\u0027 as bytes.","32":" *","33":" * @return int","34":" *\/","35":" protected function getPostMaxSize()","36":" {","37":" if (is_numeric($postMaxSize = ini_get(\u0027post_max_size\u0027))) {","38":" return (int) $postMaxSize;","39":" }","40":"","41":" $metric = strtoupper(substr($postMaxSize, -1));","42":" $postMaxSize = (int) $postMaxSize;"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Foundation\/Http\/Middleware\/ValidatePostSize.php","is_application_frame":false},{"line_number":171,"method":"Illuminate\\Pipeline\\{closure}","class":"Illuminate\\Pipeline\\Pipeline","code_snippet":{"156":"","157":" \/\/ If the pipe is a string we will parse the string and resolve the class out","158":" \/\/ of the dependency injection container. We can then build a callable and","159":" \/\/ execute the pipe function giving in the parameters that are required.","160":" $pipe = $this-\u003EgetContainer()-\u003Emake($name);","161":"","162":" $parameters = array_merge([$passable, $stack], $parameters);","163":" } else {","164":" \/\/ If the pipe is already an object we\u0027ll just make a callable and pass it to","165":" \/\/ the pipe as-is. There is no need to do any extra parsing and formatting","166":" \/\/ since the object we\u0027re given was already a fully instantiated object.","167":" $parameters = [$passable, $stack];","168":" }","169":"","170":" $carry = method_exists($pipe, $this-\u003Emethod)","171":" ? $pipe-\u003E{$this-\u003Emethod}(...$parameters)","172":" : $pipe(...$parameters);","173":"","174":" return $this-\u003EhandleCarry($carry);","175":" } catch (Exception $e) {","176":" return $this-\u003EhandleException($passable, $e);","177":" } catch (Throwable $e) {","178":" return $this-\u003EhandleException($passable, new FatalThrowableError($e));","179":" }","180":" };","181":" };","182":" }","183":"","184":" \/**","185":" * Parse full pipe string to get name and parameters.","186":" *"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Pipeline\/Pipeline.php","is_application_frame":false},{"line_number":57,"method":"handle","class":"Fideloper\\Proxy\\TrustProxies","code_snippet":{"42":" \/**","43":" * Handle an incoming request.","44":" *","45":" * @param \\Illuminate\\Http\\Request $request","46":" * @param \\Closure $next","47":" *","48":" * @throws \\Symfony\\Component\\HttpKernel\\Exception\\HttpException","49":" *","50":" * @return mixed","51":" *\/","52":" public function handle(Request $request, Closure $next)","53":" {","54":" $request::setTrustedProxies([], $this-\u003EgetTrustedHeaderNames()); \/\/ Reset trusted proxies between requests","55":" $this-\u003EsetTrustedProxyIpAddresses($request);","56":"","57":" return $next($request);","58":" }","59":"","60":" \/**","61":" * Sets the trusted proxies on the request to the value of trustedproxy.proxies","62":" *","63":" * @param \\Illuminate\\Http\\Request $request","64":" *\/","65":" protected function setTrustedProxyIpAddresses(Request $request)","66":" {","67":" $trustedIps = $this-\u003Eproxies ?: $this-\u003Econfig-\u003Eget(\u0027trustedproxy.proxies\u0027);","68":"","69":" \/\/ Trust any IP address that calls us","70":" \/\/ `**` for backwards compatibility, but is deprecated","71":" if ($trustedIps === \u0027*\u0027 || $trustedIps === \u0027**\u0027) {","72":" return $this-\u003EsetTrustedProxyIpAddressesToTheCallingIp($request);"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/fideloper\/proxy\/src\/TrustProxies.php","is_application_frame":false},{"line_number":171,"method":"Illuminate\\Pipeline\\{closure}","class":"Illuminate\\Pipeline\\Pipeline","code_snippet":{"156":"","157":" \/\/ If the pipe is a string we will parse the string and resolve the class out","158":" \/\/ of the dependency injection container. We can then build a callable and","159":" \/\/ execute the pipe function giving in the parameters that are required.","160":" $pipe = $this-\u003EgetContainer()-\u003Emake($name);","161":"","162":" $parameters = array_merge([$passable, $stack], $parameters);","163":" } else {","164":" \/\/ If the pipe is already an object we\u0027ll just make a callable and pass it to","165":" \/\/ the pipe as-is. There is no need to do any extra parsing and formatting","166":" \/\/ since the object we\u0027re given was already a fully instantiated object.","167":" $parameters = [$passable, $stack];","168":" }","169":"","170":" $carry = method_exists($pipe, $this-\u003Emethod)","171":" ? $pipe-\u003E{$this-\u003Emethod}(...$parameters)","172":" : $pipe(...$parameters);","173":"","174":" return $this-\u003EhandleCarry($carry);","175":" } catch (Exception $e) {","176":" return $this-\u003EhandleException($passable, $e);","177":" } catch (Throwable $e) {","178":" return $this-\u003EhandleException($passable, new FatalThrowableError($e));","179":" }","180":" };","181":" };","182":" }","183":"","184":" \/**","185":" * Parse full pipe string to get name and parameters.","186":" *"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Pipeline\/Pipeline.php","is_application_frame":false},{"line_number":21,"method":"handle","class":"Illuminate\\Foundation\\Http\\Middleware\\TransformsRequest","code_snippet":{"6":"use Symfony\\Component\\HttpFoundation\\ParameterBag;","7":"","8":"class TransformsRequest","9":"{","10":" \/**","11":" * Handle an incoming request.","12":" *","13":" * @param \\Illuminate\\Http\\Request $request","14":" * @param \\Closure $next","15":" * @return mixed","16":" *\/","17":" public function handle($request, Closure $next)","18":" {","19":" $this-\u003Eclean($request);","20":"","21":" return $next($request);","22":" }","23":"","24":" \/**","25":" * Clean the request\u0027s data.","26":" *","27":" * @param \\Illuminate\\Http\\Request $request","28":" * @return void","29":" *\/","30":" protected function clean($request)","31":" {","32":" $this-\u003EcleanParameterBag($request-\u003Equery);","33":"","34":" if ($request-\u003EisJson()) {","35":" $this-\u003EcleanParameterBag($request-\u003Ejson());","36":" } elseif ($request-\u003Erequest !== $request-\u003Equery) {"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Foundation\/Http\/Middleware\/TransformsRequest.php","is_application_frame":false},{"line_number":171,"method":"Illuminate\\Pipeline\\{closure}","class":"Illuminate\\Pipeline\\Pipeline","code_snippet":{"156":"","157":" \/\/ If the pipe is a string we will parse the string and resolve the class out","158":" \/\/ of the dependency injection container. We can then build a callable and","159":" \/\/ execute the pipe function giving in the parameters that are required.","160":" $pipe = $this-\u003EgetContainer()-\u003Emake($name);","161":"","162":" $parameters = array_merge([$passable, $stack], $parameters);","163":" } else {","164":" \/\/ If the pipe is already an object we\u0027ll just make a callable and pass it to","165":" \/\/ the pipe as-is. There is no need to do any extra parsing and formatting","166":" \/\/ since the object we\u0027re given was already a fully instantiated object.","167":" $parameters = [$passable, $stack];","168":" }","169":"","170":" $carry = method_exists($pipe, $this-\u003Emethod)","171":" ? $pipe-\u003E{$this-\u003Emethod}(...$parameters)","172":" : $pipe(...$parameters);","173":"","174":" return $this-\u003EhandleCarry($carry);","175":" } catch (Exception $e) {","176":" return $this-\u003EhandleException($passable, $e);","177":" } catch (Throwable $e) {","178":" return $this-\u003EhandleException($passable, new FatalThrowableError($e));","179":" }","180":" };","181":" };","182":" }","183":"","184":" \/**","185":" * Parse full pipe string to get name and parameters.","186":" *"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Pipeline\/Pipeline.php","is_application_frame":false},{"line_number":105,"method":"then","class":"Illuminate\\Pipeline\\Pipeline","code_snippet":{"90":" return $this;","91":" }","92":"","93":" \/**","94":" * Run the pipeline with a final destination callback.","95":" *","96":" * @param \\Closure $destination","97":" * @return mixed","98":" *\/","99":" public function then(Closure $destination)","100":" {","101":" $pipeline = array_reduce(","102":" array_reverse($this-\u003Epipes()), $this-\u003Ecarry(), $this-\u003EprepareDestination($destination)","103":" );","104":"","105":" return $pipeline($this-\u003Epassable);","106":" }","107":"","108":" \/**","109":" * Run the pipeline and return the result.","110":" *","111":" * @return mixed","112":" *\/","113":" public function thenReturn()","114":" {","115":" return $this-\u003Ethen(function ($passable) {","116":" return $passable;","117":" });","118":" }","119":"","120":" \/**"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Pipeline\/Pipeline.php","is_application_frame":false},{"line_number":145,"method":"sendRequestThroughRouter","class":"Illuminate\\Foundation\\Http\\Kernel","code_snippet":{"130":" *","131":" * @param \\Illuminate\\Http\\Request $request","132":" * @return \\Illuminate\\Http\\Response","133":" *\/","134":" protected function sendRequestThroughRouter($request)","135":" {","136":" $this-\u003Eapp-\u003Einstance(\u0027request\u0027, $request);","137":"","138":" Facade::clearResolvedInstance(\u0027request\u0027);","139":"","140":" $this-\u003Ebootstrap();","141":"","142":" return (new Pipeline($this-\u003Eapp))","143":" -\u003Esend($request)","144":" -\u003Ethrough($this-\u003Eapp-\u003EshouldSkipMiddleware() ? [] : $this-\u003Emiddleware)","145":" -\u003Ethen($this-\u003EdispatchToRouter());","146":" }","147":"","148":" \/**","149":" * Bootstrap the application for HTTP requests.","150":" *","151":" * @return void","152":" *\/","153":" public function bootstrap()","154":" {","155":" if (! $this-\u003Eapp-\u003EhasBeenBootstrapped()) {","156":" $this-\u003Eapp-\u003EbootstrapWith($this-\u003Ebootstrappers());","157":" }","158":" }","159":"","160":" \/**"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Foundation\/Http\/Kernel.php","is_application_frame":false},{"line_number":110,"method":"handle","class":"Illuminate\\Foundation\\Http\\Kernel","code_snippet":{"95":"","96":" $this-\u003EsyncMiddlewareToRouter();","97":" }","98":"","99":" \/**","100":" * Handle an incoming HTTP request.","101":" *","102":" * @param \\Illuminate\\Http\\Request $request","103":" * @return \\Illuminate\\Http\\Response","104":" *\/","105":" public function handle($request)","106":" {","107":" try {","108":" $request-\u003EenableHttpMethodParameterOverride();","109":"","110":" $response = $this-\u003EsendRequestThroughRouter($request);","111":" } catch (Exception $e) {","112":" $this-\u003EreportException($e);","113":"","114":" $response = $this-\u003ErenderException($request, $e);","115":" } catch (Throwable $e) {","116":" $this-\u003EreportException($e = new FatalThrowableError($e));","117":"","118":" $response = $this-\u003ErenderException($request, $e);","119":" }","120":"","121":" $this-\u003Eapp[\u0027events\u0027]-\u003Edispatch(","122":" new RequestHandled($request, $response)","123":" );","124":"","125":" return $response;"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Foundation\/Http\/Kernel.php","is_application_frame":false},{"line_number":55,"method":"[top]","class":null,"code_snippet":{"31":"| We need to illuminate PHP development, so let us turn on the lights.","32":"| This bootstraps the framework and gets it ready for use, then it","33":"| will load up this application so that we can run it and send","34":"| the responses back to the browser and delight our users.","35":"|","36":"*\/","37":"","38":"$app = require_once __DIR__.\u0027\/..\/bootstrap\/app.php\u0027;","39":"","40":"\/*","41":"|--------------------------------------------------------------------------","42":"| Run The Application","43":"|--------------------------------------------------------------------------","44":"|","45":"| Once we have the application, we can handle the incoming request","46":"| through the kernel, and send the associated response back to","47":"| the client\u0027s browser allowing them to enjoy the creative","48":"| and wonderful application we have prepared for them.","49":"|","50":"*\/","51":"","52":"$kernel = $app-\u003Emake(Illuminate\\Contracts\\Http\\Kernel::class);","53":"","54":"$response = $kernel-\u003Ehandle(","55":" $request = Illuminate\\Http\\Request::capture()","56":");","57":"","58":"$response-\u003Esend();","59":"","60":"$kernel-\u003Eterminate($request, $response);","61":""},"file":"\/home\/vagrant\/ProjectLaravel\/public\/index.php","is_application_frame":false}],"context":{"request":{"url":"http:\/\/b3789e93786d.ngrok.io\/password\/reset\/Arachni-dc1fd3348d199f5e66655a1b9ebcc24e","ip":null,"method":"PUT","useragent":"Arachni\/v2.0dev"},"request_data":{"queryString":[],"body":[],"files":[]},"headers":{"x-forwarded-for":["115.134.146.242"],"expect":["100-continue"],"content-length":["55"],"cookie":["XSRF-TOKEN=eyJpdiI6Ik1QSThTc2x0UnVyVWJxdTJHQm1GV3c9PSIsInZhbHVlIjoibUw4Qkw5ZUtCR0FMK3c5XC9IVU1tdjBYdnlsZkh4ZGdMOXdyaFdVTDFTbCtNYnZXeWtyWTNNdERndGE1S2VKSFFJcmViSm9tc3BNWGNoM2VtKytMdWZ3NzAzN0JyUFJ4NFJJVHVNbjAzVkZCdjVVbUNYU25hR3BDZkJIS09zOHZNIiwibWFjIjoiMzY3MzZmYWRlY2ZhOGIwZTVhYzE4MTBhZTZmYjY3NmMxZWFhMjNiMDAxODczYWUwZTg0MjJiY2E1YjI1Mzc0MyJ9;laravel_session=eyJpdiI6IkJVaDU1MTZRR0JyUng0Z1hydWs1Y0E9PSIsInZhbHVlIjoiUGlndUtzWXhoUzZYZEhjZ3E2MmNMdlwvMjVvMlJGTW1iSWxWazBFSzJTdzV1bDNPaDdTazdKRisrdlwvdDRVWE9IYk9LcXg5SE83VUNvdHRXUENxNm44ZkJQQ0xMcGhOWFNnaGZcL20ySlwvdXNUSUZkSDArS0hGMXZLaHQ0S3hDZ3N4IiwibWFjIjoiZjIzOTlhZmEyNGZhZjc5MjAyZjQ5MmMwYmE1MGI2MjZiNTVkMjBmNTNlY2I1ZjY0ODJiNDZhZGI2ZDFhYTEyZiJ9"],"x-arachni-scan-seed":["dc1fd3348d199f5e66655a1b9ebcc24e"],"accept-language":["en-US,en;q=0.8,he;q=0.6"],"accept":["text\/html,application\/xhtml+xml,application\/xml;q=0.9,*\/*;q=0.8"],"user-agent":["Arachni\/v2.0dev"],"accept-encoding":["gzip, deflate"],"host":["b3789e93786d.ngrok.io"],"content-type":[""]},"cookies":{"XSRF-TOKEN":"eyJpdiI6Ik1QSThTc2x0UnVyVWJxdTJHQm1GV3c9PSIsInZhbHVlIjoibUw4Qkw5ZUtCR0FMK3c5XC9IVU1tdjBYdnlsZkh4ZGdMOXdyaFdVTDFTbCtNYnZXeWtyWTNNdERndGE1S2VKSFFJcmViSm9tc3BNWGNoM2VtKytMdWZ3NzAzN0JyUFJ4NFJJVHVNbjAzVkZCdjVVbUNYU25hR3BDZkJIS09zOHZNIiwibWFjIjoiMzY3MzZmYWRlY2ZhOGIwZTVhYzE4MTBhZTZmYjY3NmMxZWFhMjNiMDAxODczYWUwZTg0MjJiY2E1YjI1Mzc0MyJ9","laravel_session":"eyJpdiI6IkJVaDU1MTZRR0JyUng0Z1hydWs1Y0E9PSIsInZhbHVlIjoiUGlndUtzWXhoUzZYZEhjZ3E2MmNMdlwvMjVvMlJGTW1iSWxWazBFSzJTdzV1bDNPaDdTazdKRisrdlwvdDRVWE9IYk9LcXg5SE83VUNvdHRXUENxNm44ZkJQQ0xMcGhOWFNnaGZcL20ySlwvdXNUSUZkSDArS0hGMXZLaHQ0S3hDZ3N4IiwibWFjIjoiZjIzOTlhZmEyNGZhZjc5MjAyZjQ5MmMwYmE1MGI2MjZiNTVkMjBmNTNlY2I1ZjY0ODJiNDZhZGI2ZDFhYTEyZiJ9"},"session":[],"route":{"route":null,"routeParameters":[],"controllerAction":null,"middleware":[]},"user":[],"env":{"laravel_version":"6.20.2","laravel_locale":"en","laravel_config_cached":false,"php_version":"7.4.11"},"logs":[],"dumps":[],"queries":[],"git":{"hash":"","message":"","tag":"","remote":"","isDirty":false}},"stage":"local","message_level":null,"open_frame_index":null,"group_by":"topFrame","application_path":"\/home\/vagrant\/ProjectLaravel"},"config":{"editor":"phpstorm","remoteSitesPath":"","localSitesPath":"","theme":"light","enableShareButton":true,"enableRunnableSolutions":true,"directorySeparator":"\/"},"solutions":[],"telescopeUrl":null,"shareEndpoint":"http:\/\/b3789e93786d.ngrok.io\/_ignition\/share-report","defaultTab":"StackTab","defaultTabProps":[]}
window.tabs = [];
</script>
<noscript><pre>Symfony\Component\HttpKernel\Exception\MethodNotAllowedHttpException: The PUT method is not supported for this route. Supported methods: GET, HEAD. in file /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/RouteCollection.php on line 256
#0 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/RouteCollection.php(242): Illuminate\Routing\RouteCollection->methodNotAllowed()
#1 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/RouteCollection.php(176): Illuminate\Routing\RouteCollection->getRouteForMethods()
#2 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/Router.php(635): Illuminate\Routing\RouteCollection->match()
#3 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/Router.php(624): Illuminate\Routing\Router->findRoute()
#4 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/Router.php(613): Illuminate\Routing\Router->dispatchToRoute()
#5 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(170): Illuminate\Routing\Router->dispatch()
#6 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(130): Illuminate\Foundation\Http\Kernel->Illuminate\Foundation\Http\{closure}()
#7 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/TransformsRequest.php(21): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#8 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(171): Illuminate\Foundation\Http\Middleware\TransformsRequest->handle()
#9 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/CheckForMaintenanceMode.php(63): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#10 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(171): Illuminate\Foundation\Http\Middleware\CheckForMaintenanceMode->handle()
#11 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/ValidatePostSize.php(27): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#12 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(171): Illuminate\Foundation\Http\Middleware\ValidatePostSize->handle()
#13 /home/vagrant/ProjectLaravel/vendor/fideloper/proxy/src/TrustProxies.php(57): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#14 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(171): Fideloper\Proxy\TrustProxies->handle()
#15 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/TransformsRequest.php(21): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#16 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(171): Illuminate\Foundation\Http\Middleware\TransformsRequest->handle()
#17 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(105): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#18 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(145): Illuminate\Pipeline\Pipeline->then()
#19 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(110): Illuminate\Foundation\Http\Kernel->sendRequestThroughRouter()
#20 /home/vagrant/ProjectLaravel/public/index.php(55): Illuminate\Foundation\Http\Kernel->handle()
#21 {main}
</pre></noscript>
<div id="app"></div>
<script>!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)||Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="/",n(n.s=280)}([function(t,e,n){"use strict";function r(t,e,n,r,o,i,a,s){var c,u="function"==typeof t?t.options:t;if(e&&(u.render=e,u.staticRenderFns=n,u._compiled=!0),r&&(u.functional=!0),i&&(u._scopeId="data-v-"+i),a?(c=function(t){(t=t||this.$vnode&&this.$vnode.ssrContext||this.parent&&this.parent.$vnode&&this.parent.$vnode.ssrContext)||"undefined"==typeof __VUE_SSR_CONTEXT__||(t=__VUE_SSR_CONTEXT__),o&&o.call(this,t),t&&t._registeredComponents&&t._registeredComponents.add(a)},u._ssrRegister=c):o&&(c=s?function(){o.call(this,this.$root.$options.shadowRoot)}:o),c)if(u.functional){u._injectStyles=c;var l=u.render;u.render=function(t,e){return c.call(e),l(t,e)}}else{var f=u.beforeCreate;u.beforeCreate=f?[].concat(f,c):[c]}return{exports:t,options:u}}n.d(e,"a",function(){return r})},function(t,e,n){"use strict";var r=Object.prototype.hasOwnProperty;function o(t,e){return r.call(t,e)}function i(t){return!(t>=55296&&t<=57343)&&(!(t>=64976&&t<=65007)&&(65535!=(65535&t)&&65534!=(65535&t)&&(!(t>=0&&t<=8)&&(11!==t&&(!(t>=14&&t<=31)&&(!(t>=127&&t<=159)&&!(t>1114111)))))))}function a(t){if(t>65535){var e=55296+((t-=65536)>>10),n=56320+(1023&t);return String.fromCharCode(e,n)}return String.fromCharCode(t)}var s=/\\([!"#$%&'()*+,\-.\/:;<=>?@[\\\]^_`{|}~])/g,c=new RegExp(s.source+"|"+/&([a-z#][a-z0-9]{1,31});/gi.source,"gi"),u=/^#((?:x[a-f0-9]{1,8}|[0-9]{1,8}))/i,l=n(55);var f=/[&<>"]/,p=/[&<>"]/g,d={"&":"&","<":"<",">":">",'"':"""};function h(t){return d[t]}var m=/[.?*+^$[\]\\(){}|-]/g;var g=n(36);e.lib={},e.lib.mdurl=n(56),e.lib.ucmicro=n(107),e.assign=function(t){return Array.prototype.slice.call(arguments,1).forEach(function(e){if(e){if("object"!=typeof e)throw new TypeError(e+"must be object");Object.keys(e).forEach(function(n){t[n]=e[n]})}}),t},e.isString=function(t){return"[object String]"===function(t){return Object.prototype.toString.call(t)}(t)},e.has=o,e.unescapeMd=function(t){return t.indexOf("\\")<0?t:t.replace(s,"$1")},e.unescapeAll=function(t){return t.indexOf("\\")<0&&t.indexOf("&")<0?t:t.replace(c,function(t,e,n){return e||function(t,e){var n=0;return o(l,e)?l[e]:35===e.charCodeAt(0)&&u.test(e)&&i(n="x"===e[1].toLowerCase()?parseInt(e.slice(2),16):parseInt(e.slice(1),10))?a(n):t}(t,n)})},e.isValidEntityCode=i,e.fromCodePoint=a,e.escapeHtml=function(t){return f.test(t)?t.replace(p,h):t},e.arrayReplaceAt=function(t,e,n){return[].concat(t.slice(0,e),n,t.slice(e+1))},e.isSpace=function(t){switch(t){case 9:case 32:return!0}return!1},e.isWhiteSpace=function(t){if(t>=8192&&t<=8202)return!0;switch(t){case 9:case 10:case 11:case 12:case 13:case 32:case 160:case 5760:case 8239:case 8287:case 12288:return!0}return!1},e.isMdAsciiPunct=function(t){switch(t){case 33:case 34:case 35:case 36:case 37:case 38:case 39:case 40:case 41:case 42:case 43:case 44:case 45:case 46:case 47:case 58:case 59:case 60:case 61:case 62:case 63:case 64:case 91:case 92:case 93:case 94:case 95:case 96:case 123:case 124:case 125:case 126:return!0;default:return!1}},e.isPunctChar=function(t){return g.test(t)},e.escapeRE=function(t){return t.replace(m,"\\$&")},e.normalizeReference=function(t){return t=t.trim().replace(/\s+/g," "),"Ṿ"==="ẞ".toLowerCase()&&(t=t.replace(/ẞ/g,"ß")),t.toLowerCase().toUpperCase()}},function(t,e,n){"use strict";e.a={functional:!0,props:{label:{default:""}},render:function(t,e){return[t("dt",{attrs:{class:"definition-label"}},e.props.label),t("dd",{attrs:{class:"definition-value"}},e.children)]}}},function(t,e,n){"use strict";var r={props:{title:{default:""},className:{default:""}}},o=n(0),i=Object(o.a)(r,function(){var t=this,e=t.$createElement,n=t._self._c||e;return n("div",{class:t.className},[t.title?n("h3",{staticClass:"definition-list-title"},[t._v(t._s(t.title))]):t._e(),t._v(" "),this.$slots.default?n("dl",{staticClass:"definition-list"},[t._t("default")],2):t._e(),t._v(" "),this.$slots.default?t._e():n("div",{staticClass:"definition-list"},[n("div",{staticClass:"definition-list-empty"},[t._v("—")])])])},[],!1,null,null,null);e.a=i.exports},function(t,e,n){var r=n(160),o=n(161),i=n(162);t.exports=function(t){return r(t)||o(t)||i()}},function(t,e,n){"use strict";var r=n(33),o={props:{file:{required:!0},editable:{default:!1},relative:{default:!0},lineNumber:{required:!1},pathClass:{default:""}},data:function(){return{segments:[],filename:"",fileSegments:[]}},inject:["config","report"],watch:{file:{immediate:!0,handler:function(){this.segments=this.path.replace(/^\/Users/,"~").split("/"),this.filename=this.segments.pop()||"",this.fileSegments=this.filename.split(".")}}},computed:{path:function(){return this.relative?this.file.replace(this.report.application_path+"/",""):this.file},editorUrl:function(){return Object(r.a)(this.config,this.file,this.lineNumber)}}},i=n(0),a=Object(i.a)(o,function(){var t=this,e=t.$createElement,n=t._self._c||e;return n("span",{staticClass:"inline-flex justify-start items-baseline"},[n("span",t._g({staticClass:"ui-path",class:t.pathClass},t.$listeners),[t._l(t.segments,function(e,r){return n("span",{key:"segment-"+r},[t._v(t._s(e)+"/"),n("wbr")])}),t._l(t.fileSegments,function(e,r){return n("span",{key:"file-"+r,class:0===r?"font-semibold":""},[t._v(t._s(r>0?".":"")+t._s(e))])}),t.lineNumber?n("span",[t._v(":"+t._s(t.lineNumber))]):t._e()],2),t._v(" "),t._t("default"),t._v(" "),t.editable&&t.editorUrl?n("a",{staticClass:"ml-2 inline-block text-sm text-purple-400 hover:text-purple-500",attrs:{href:t.editorUrl}},[n("Icon",{attrs:{name:"pencil"}})],1):t._e()],2)},[],!1,null,null,null);e.a=a.exports},function(t,e){t.exports=function(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}},function(t,e,n){"use strict";(function(t,n){
/*!
* Vue.js v2.6.10
* (c) 2014-2019 Evan You
* Released under the MIT License.
*/
var r=Object.freeze({});function o(t){return null==t}function i(t){return null!=t}function a(t){return!0===t}function s(t){return"string"==typeof t||"number"==typeof t||"symbol"==typeof t||"boolean"==typeof t}function c(t){return null!==t&&"object"==typeof t}var u=Object.prototype.toString;function l(t){return"[object Object]"===u.call(t)}function f(t){return"[object RegExp]"===u.call(t)}function p(t){var e=parseFloat(String(t));return e>=0&&Math.floor(e)===e&&isFinite(t)}function d(t){return i(t)&&"function"==typeof t.then&&"function"==typeof t.catch}function h(t){return null==t?"":Array.isArray(t)||l(t)&&t.toString===u?JSON.stringify(t,null,2):String(t)}function m(t){var e=parseFloat(t);return isNaN(e)?t:e}function g(t,e){for(var n=Object.create(null),r=t.split(","),o=0;o<r.length;o++)n[r[o]]=!0;return e?function(t){return n[t.toLowerCase()]}:function(t){return n[t]}}var v=g("slot,component",!0),b=g("key,ref,slot,slot-scope,is");function _(t,e){if(t.length){var n=t.indexOf(e);if(n>-1)return t.splice(n,1)}}var y=Object.prototype.hasOwnProperty;function E(t,e){return y.call(t,e)}function k(t){var e=Object.create(null);return function(n){return e[n]||(e[n]=t(n))}}var x=/-(\w)/g,w=k(function(t){return t.replace(x,function(t,e){return e?e.toUpperCase():""})}),C=k(function(t){return t.charAt(0).toUpperCase()+t.slice(1)}),A=/\B([A-Z])/g,T=k(function(t){return t.replace(A,"-$1").toLowerCase()});var S=Function.prototype.bind?function(t,e){return t.bind(e)}:function(t,e){function n(n){var r=arguments.length;return r?r>1?t.apply(e,arguments):t.call(e,n):t.call(e)}return n._length=t.length,n};function R(t,e){e=e||0;for(var n=t.length-e,r=new Array(n);n--;)r[n]=t[n+e];return r}function O(t,e){for(var n in e)t[n]=e[n];return t}function N(t){for(var e={},n=0;n<t.length;n++)t[n]&&O(e,t[n]);return e}function L(t,e,n){}var I=function(t,e,n){return!1},D=function(t){return t};function M(t,e){if(t===e)return!0;var n=c(t),r=c(e);if(!n||!r)return!n&&!r&&String(t)===String(e);try{var o=Array.isArray(t),i=Array.isArray(e);if(o&&i)return t.length===e.length&&t.every(function(t,n){return M(t,e[n])});if(t instanceof Date&&e instanceof Date)return t.getTime()===e.getTime();if(o||i)return!1;var a=Object.keys(t),s=Object.keys(e);return a.length===s.length&&a.every(function(n){return M(t[n],e[n])})}catch(t){return!1}}function P(t,e){for(var n=0;n<t.length;n++)if(M(t[n],e))return n;return-1}function j(t){var e=!1;return function(){e||(e=!0,t.apply(this,arguments))}}var U="data-server-rendered",F=["component","directive","filter"],$=["beforeCreate","created","beforeMount","mounted","beforeUpdate","updated","beforeDestroy","destroyed","activated","deactivated","errorCaptured","serverPrefetch"],B={optionMergeStrategies:Object.create(null),silent:!1,productionTip:!1,devtools:!1,performance:!1,errorHandler:null,warnHandler:null,ignoredElements:[],keyCodes:Object.create(null),isReservedTag:I,isReservedAttr:I,isUnknownElement:I,getTagNamespace:L,parsePlatformTagName:D,mustUseProp:I,async:!0,_lifecycleHooks:$},z=/a-zA-Z\u00B7\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u037D\u037F-\u1FFF\u200C-\u200D\u203F-\u2040\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD/;function q(t){var e=(t+"").charCodeAt(0);return 36===e||95===e}function H(t,e,n,r){Object.defineProperty(t,e,{value:n,enumerable:!!r,writable:!0,configurable:!0})}var G=new RegExp("[^"+z.source+".$_\\d]");var V,W="__proto__"in{},Y="undefined"!=typeof window,K="undefined"!=typeof WXEnvironment&&!!WXEnvironment.platform,X=K&&WXEnvironment.platform.toLowerCase(),Z=Y&&window.navigator.userAgent.toLowerCase(),J=Z&&/msie|trident/.test(Z),Q=Z&&Z.indexOf("msie 9.0")>0,tt=Z&&Z.indexOf("edge/")>0,et=(Z&&Z.indexOf("android"),Z&&/iphone|ipad|ipod|ios/.test(Z)||"ios"===X),nt=(Z&&/chrome\/\d+/.test(Z),Z&&/phantomjs/.test(Z),Z&&Z.match(/firefox\/(\d+)/)),rt={}.watch,ot=!1;if(Y)try{var it={};Object.defineProperty(it,"passive",{get:function(){ot=!0}}),window.addEventListener("test-passive",null,it)}catch(t){}var at=function(){return void 0===V&&(V=!Y&&!K&&void 0!==t&&(t.process&&"server"===t.process.env.VUE_ENV)),V},st=Y&&window.__VUE_DEVTOOLS_GLOBAL_HOOK__;function ct(t){return"function"==typeof t&&/native code/.test(t.toString())}var ut,lt="undefined"!=typeof Symbol&&ct(Symbol)&&"undefined"!=typeof Reflect&&ct(Reflect.ownKeys);ut="undefined"!=typeof Set&&ct(Set)?Set:function(){function t(){this.set=Object.create(null)}return t.prototype.has=function(t){return!0===this.set[t]},t.prototype.add=function(t){this.set[t]=!0},t.prototype.clear=function(){this.set=Object.create(null)},t}();var ft=L,pt=0,dt=function(){this.id=pt++,this.subs=[]};dt.prototype.addSub=function(t){this.subs.push(t)},dt.prototype.removeSub=function(t){_(this.subs,t)},dt.prototype.depend=function(){dt.target&&dt.target.addDep(this)},dt.prototype.notify=function(){var t=this.subs.slice();for(var e=0,n=t.length;e<n;e++)t[e].update()},dt.target=null;var ht=[];function mt(t){ht.push(t),dt.target=t}function gt(){ht.pop(),dt.target=ht[ht.length-1]}var vt=function(t,e,n,r,o,i,a,s){this.tag=t,this.data=e,this.children=n,this.text=r,this.elm=o,this.ns=void 0,this.context=i,this.fnContext=void 0,this.fnOptions=void 0,this.fnScopeId=void 0,this.key=e&&e.key,this.componentOptions=a,this.componentInstance=void 0,this.parent=void 0,this.raw=!1,this.isStatic=!1,this.isRootInsert=!0,this.isComment=!1,this.isCloned=!1,this.isOnce=!1,this.asyncFactory=s,this.asyncMeta=void 0,this.isAsyncPlaceholder=!1},bt={child:{configurable:!0}};bt.child.get=function(){return this.componentInstance},Object.defineProperties(vt.prototype,bt);var _t=function(t){void 0===t&&(t="");var e=new vt;return e.text=t,e.isComment=!0,e};function yt(t){return new vt(void 0,void 0,void 0,String(t))}function Et(t){var e=new vt(t.tag,t.data,t.children&&t.children.slice(),t.text,t.elm,t.context,t.componentOptions,t.asyncFactory);return e.ns=t.ns,e.isStatic=t.isStatic,e.key=t.key,e.isComment=t.isComment,e.fnContext=t.fnContext,e.fnOptions=t.fnOptions,e.fnScopeId=t.fnScopeId,e.asyncMeta=t.asyncMeta,e.isCloned=!0,e}var kt=Array.prototype,xt=Object.create(kt);["push","pop","shift","unshift","splice","sort","reverse"].forEach(function(t){var e=kt[t];H(xt,t,function(){for(var n=[],r=arguments.length;r--;)n[r]=arguments[r];var o,i=e.apply(this,n),a=this.__ob__;switch(t){case"push":case"unshift":o=n;break;case"splice":o=n.slice(2)}return o&&a.observeArray(o),a.dep.notify(),i})});var wt=Object.getOwnPropertyNames(xt),Ct=!0;function At(t){Ct=t}var Tt=function(t){this.value=t,this.dep=new dt,this.vmCount=0,H(t,"__ob__",this),Array.isArray(t)?(W?function(t,e){t.__proto__=e}(t,xt):function(t,e,n){for(var r=0,o=n.length;r<o;r++){var i=n[r];H(t,i,e[i])}}(t,xt,wt),this.observeArray(t)):this.walk(t)};function St(t,e){var n;if(c(t)&&!(t instanceof vt))return E(t,"__ob__")&&t.__ob__ instanceof Tt?n=t.__ob__:Ct&&!at()&&(Array.isArray(t)||l(t))&&Object.isExtensible(t)&&!t._isVue&&(n=new Tt(t)),e&&n&&n.vmCount++,n}function Rt(t,e,n,r,o){var i=new dt,a=Object.getOwnPropertyDescriptor(t,e);if(!a||!1!==a.configurable){var s=a&&a.get,c=a&&a.set;s&&!c||2!==arguments.length||(n=t[e]);var u=!o&&St(n);Object.defineProperty(t,e,{enumerable:!0,configurable:!0,get:function(){var e=s?s.call(t):n;return dt.target&&(i.depend(),u&&(u.dep.depend(),Array.isArray(e)&&function t(e){for(var n=void 0,r=0,o=e.length;r<o;r++)(n=e[r])&&n.__ob__&&n.__ob__.dep.depend(),Array.isArray(n)&&t(n)}(e))),e},set:function(e){var r=s?s.call(t):n;e===r||e!=e&&r!=r||s&&!c||(c?c.call(t,e):n=e,u=!o&&St(e),i.notify())}})}}function Ot(t,e,n){if(Array.isArray(t)&&p(e))return t.length=Math.max(t.length,e),t.splice(e,1,n),n;if(e in t&&!(e in Object.prototype))return t[e]=n,n;var r=t.__ob__;return t._isVue||r&&r.vmCount?n:r?(Rt(r.value,e,n),r.dep.notify(),n):(t[e]=n,n)}function Nt(t,e){if(Array.isArray(t)&&p(e))t.splice(e,1);else{var n=t.__ob__;t._isVue||n&&n.vmCount||E(t,e)&&(delete t[e],n&&n.dep.notify())}}Tt.prototype.walk=function(t){for(var e=Object.keys(t),n=0;n<e.length;n++)Rt(t,e[n])},Tt.prototype.observeArray=function(t){for(var e=0,n=t.length;e<n;e++)St(t[e])};var Lt=B.optionMergeStrategies;function It(t,e){if(!e)return t;for(var n,r,o,i=lt?Reflect.ownKeys(e):Object.keys(e),a=0;a<i.length;a++)"__ob__"!==(n=i[a])&&(r=t[n],o=e[n],E(t,n)?r!==o&&l(r)&&l(o)&&It(r,o):Ot(t,n,o));return t}function Dt(t,e,n){return n?function(){var r="function"==typeof e?e.call(n,n):e,o="function"==typeof t?t.call(n,n):t;return r?It(r,o):o}:e?t?function(){return It("function"==typeof e?e.call(this,this):e,"function"==typeof t?t.call(this,this):t)}:e:t}function Mt(t,e){var n=e?t?t.concat(e):Array.isArray(e)?e:[e]:t;return n?function(t){for(var e=[],n=0;n<t.length;n++)-1===e.indexOf(t[n])&&e.push(t[n]);return e}(n):n}function Pt(t,e,n,r){var o=Object.create(t||null);return e?O(o,e):o}Lt.data=function(t,e,n){return n?Dt(t,e,n):e&&"function"!=typeof e?t:Dt(t,e)},$.forEach(function(t){Lt[t]=Mt}),F.forEach(function(t){Lt[t+"s"]=Pt}),Lt.watch=function(t,e,n,r){if(t===rt&&(t=void 0),e===rt&&(e=void 0),!e)return Object.create(t||null);if(!t)return e;var o={};for(var i in O(o,t),e){var a=o[i],s=e[i];a&&!Array.isArray(a)&&(a=[a]),o[i]=a?a.concat(s):Array.isArray(s)?s:[s]}return o},Lt.props=Lt.methods=Lt.inject=Lt.computed=function(t,e,n,r){if(!t)return e;var o=Object.create(null);return O(o,t),e&&O(o,e),o},Lt.provide=Dt;var jt=function(t,e){return void 0===e?t:e};function Ut(t,e,n){if("function"==typeof e&&(e=e.options),function(t,e){var n=t.props;if(n){var r,o,i={};if(Array.isArray(n))for(r=n.length;r--;)"string"==typeof(o=n[r])&&(i[w(o)]={type:null});else if(l(n))for(var a in n)o=n[a],i[w(a)]=l(o)?o:{type:o};t.props=i}}(e),function(t,e){var n=t.inject;if(n){var r=t.inject={};if(Array.isArray(n))for(var o=0;o<n.length;o++)r[n[o]]={from:n[o]};else if(l(n))for(var i in n){var a=n[i];r[i]=l(a)?O({from:i},a):{from:a}}}}(e),function(t){var e=t.directives;if(e)for(var n in e){var r=e[n];"function"==typeof r&&(e[n]={bind:r,update:r})}}(e),!e._base&&(e.extends&&(t=Ut(t,e.extends,n)),e.mixins))for(var r=0,o=e.mixins.length;r<o;r++)t=Ut(t,e.mixins[r],n);var i,a={};for(i in t)s(i);for(i in e)E(t,i)||s(i);function s(r){var o=Lt[r]||jt;a[r]=o(t[r],e[r],n,r)}return a}function Ft(t,e,n,r){if("string"==typeof n){var o=t[e];if(E(o,n))return o[n];var i=w(n);if(E(o,i))return o[i];var a=C(i);return E(o,a)?o[a]:o[n]||o[i]||o[a]}}function $t(t,e,n,r){var o=e[t],i=!E(n,t),a=n[t],s=qt(Boolean,o.type);if(s>-1)if(i&&!E(o,"default"))a=!1;else if(""===a||a===T(t)){var c=qt(String,o.type);(c<0||s<c)&&(a=!0)}if(void 0===a){a=function(t,e,n){if(!E(e,"default"))return;var r=e.default;0;if(t&&t.$options.propsData&&void 0===t.$options.propsData[n]&&void 0!==t._props[n])return t._props[n];return"function"==typeof r&&"Function"!==Bt(e.type)?r.call(t):r}(r,o,t);var u=Ct;At(!0),St(a),At(u)}return a}function Bt(t){var e=t&&t.toString().match(/^\s*function (\w+)/);return e?e[1]:""}function zt(t,e){return Bt(t)===Bt(e)}function qt(t,e){if(!Array.isArray(e))return zt(e,t)?0:-1;for(var n=0,r=e.length;n<r;n++)if(zt(e[n],t))return n;return-1}function Ht(t,e,n){mt();try{if(e)for(var r=e;r=r.$parent;){var o=r.$options.errorCaptured;if(o)for(var i=0;i<o.length;i++)try{if(!1===o[i].call(r,t,e,n))return}catch(t){Vt(t,r,"errorCaptured hook")}}Vt(t,e,n)}finally{gt()}}function Gt(t,e,n,r,o){var i;try{(i=n?t.apply(e,n):t.call(e))&&!i._isVue&&d(i)&&!i._handled&&(i.catch(function(t){return Ht(t,r,o+" (Promise/async)")}),i._handled=!0)}catch(t){Ht(t,r,o)}return i}function Vt(t,e,n){if(B.errorHandler)try{return B.errorHandler.call(null,t,e,n)}catch(e){e!==t&&Wt(e,null,"config.errorHandler")}Wt(t,e,n)}function Wt(t,e,n){if(!Y&&!K||"undefined"==typeof console)throw t;console.error(t)}var Yt,Kt=!1,Xt=[],Zt=!1;function Jt(){Zt=!1;var t=Xt.slice(0);Xt.length=0;for(var e=0;e<t.length;e++)t[e]()}if("undefined"!=typeof Promise&&ct(Promise)){var Qt=Promise.resolve();Yt=function(){Qt.then(Jt),et&&setTimeout(L)},Kt=!0}else if(J||"undefined"==typeof MutationObserver||!ct(MutationObserver)&&"[object MutationObserverConstructor]"!==MutationObserver.toString())Yt=void 0!==n&&ct(n)?function(){n(Jt)}:function(){setTimeout(Jt,0)};else{var te=1,ee=new MutationObserver(Jt),ne=document.createTextNode(String(te));ee.observe(ne,{characterData:!0}),Yt=function(){te=(te+1)%2,ne.data=String(te)},Kt=!0}function re(t,e){var n;if(Xt.push(function(){if(t)try{t.call(e)}catch(t){Ht(t,e,"nextTick")}else n&&n(e)}),Zt||(Zt=!0,Yt()),!t&&"undefined"!=typeof Promise)return new Promise(function(t){n=t})}var oe=new ut;function ie(t){!function t(e,n){var r,o;var i=Array.isArray(e);if(!i&&!c(e)||Object.isFrozen(e)||e instanceof vt)return;if(e.__ob__){var a=e.__ob__.dep.id;if(n.has(a))return;n.add(a)}if(i)for(r=e.length;r--;)t(e[r],n);else for(o=Object.keys(e),r=o.length;r--;)t(e[o[r]],n)}(t,oe),oe.clear()}var ae=k(function(t){var e="&"===t.charAt(0),n="~"===(t=e?t.slice(1):t).charAt(0),r="!"===(t=n?t.slice(1):t).charAt(0);return{name:t=r?t.slice(1):t,once:n,capture:r,passive:e}});function se(t,e){function n(){var t=arguments,r=n.fns;if(!Array.isArray(r))return Gt(r,null,arguments,e,"v-on handler");for(var o=r.slice(),i=0;i<o.length;i++)Gt(o[i],null,t,e,"v-on handler")}return n.fns=t,n}function ce(t,e,n,r,i,s){var c,u,l,f;for(c in t)u=t[c],l=e[c],f=ae(c),o(u)||(o(l)?(o(u.fns)&&(u=t[c]=se(u,s)),a(f.once)&&(u=t[c]=i(f.name,u,f.capture)),n(f.name,u,f.capture,f.passive,f.params)):u!==l&&(l.fns=u,t[c]=l));for(c in e)o(t[c])&&r((f=ae(c)).name,e[c],f.capture)}function ue(t,e,n){var r;t instanceof vt&&(t=t.data.hook||(t.data.hook={}));var s=t[e];function c(){n.apply(this,arguments),_(r.fns,c)}o(s)?r=se([c]):i(s.fns)&&a(s.merged)?(r=s).fns.push(c):r=se([s,c]),r.merged=!0,t[e]=r}function le(t,e,n,r,o){if(i(e)){if(E(e,n))return t[n]=e[n],o||delete e[n],!0;if(E(e,r))return t[n]=e[r],o||delete e[r],!0}return!1}function fe(t){return s(t)?[yt(t)]:Array.isArray(t)?function t(e,n){var r=[];var c,u,l,f;for(c=0;c<e.length;c++)o(u=e[c])||"boolean"==typeof u||(l=r.length-1,f=r[l],Array.isArray(u)?u.length>0&&(pe((u=t(u,(n||"")+"_"+c))[0])&&pe(f)&&(r[l]=yt(f.text+u[0].text),u.shift()),r.push.apply(r,u)):s(u)?pe(f)?r[l]=yt(f.text+u):""!==u&&r.push(yt(u)):pe(u)&&pe(f)?r[l]=yt(f.text+u.text):(a(e._isVList)&&i(u.tag)&&o(u.key)&&i(n)&&(u.key="__vlist"+n+"_"+c+"__"),r.push(u)));return r}(t):void 0}function pe(t){return i(t)&&i(t.text)&&!1===t.isComment}function de(t,e){if(t){for(var n=Object.create(null),r=lt?Reflect.ownKeys(t):Object.keys(t),o=0;o<r.length;o++){var i=r[o];if("__ob__"!==i){for(var a=t[i].from,s=e;s;){if(s._provided&&E(s._provided,a)){n[i]=s._provided[a];break}s=s.$parent}if(!s)if("default"in t[i]){var c=t[i].default;n[i]="function"==typeof c?c.call(e):c}else 0}}return n}}function he(t,e){if(!t||!t.length)return{};for(var n={},r=0,o=t.length;r<o;r++){var i=t[r],a=i.data;if(a&&a.attrs&&a.attrs.slot&&delete a.attrs.slot,i.context!==e&&i.fnContext!==e||!a||null==a.slot)(n.default||(n.default=[])).push(i);else{var s=a.slot,c=n[s]||(n[s]=[]);"template"===i.tag?c.push.apply(c,i.children||[]):c.push(i)}}for(var u in n)n[u].every(me)&&delete n[u];return n}function me(t){return t.isComment&&!t.asyncFactory||" "===t.text}function ge(t,e,n){var o,i=Object.keys(e).length>0,a=t?!!t.$stable:!i,s=t&&t.$key;if(t){if(t._normalized)return t._normalized;if(a&&n&&n!==r&&s===n.$key&&!i&&!n.$hasNormal)return n;for(var c in o={},t)t[c]&&"$"!==c[0]&&(o[c]=ve(e,c,t[c]))}else o={};for(var u in e)u in o||(o[u]=be(e,u));return t&&Object.isExtensible(t)&&(t._normalized=o),H(o,"$stable",a),H(o,"$key",s),H(o,"$hasNormal",i),o}function ve(t,e,n){var r=function(){var t=arguments.length?n.apply(null,arguments):n({});return(t=t&&"object"==typeof t&&!Array.isArray(t)?[t]:fe(t))&&(0===t.length||1===t.length&&t[0].isComment)?void 0:t};return n.proxy&&Object.defineProperty(t,e,{get:r,enumerable:!0,configurable:!0}),r}function be(t,e){return function(){return t[e]}}function _e(t,e){var n,r,o,a,s;if(Array.isArray(t)||"string"==typeof t)for(n=new Array(t.length),r=0,o=t.length;r<o;r++)n[r]=e(t[r],r);else if("number"==typeof t)for(n=new Array(t),r=0;r<t;r++)n[r]=e(r+1,r);else if(c(t))if(lt&&t[Symbol.iterator]){n=[];for(var u=t[Symbol.iterator](),l=u.next();!l.done;)n.push(e(l.value,n.length)),l=u.next()}else for(a=Object.keys(t),n=new Array(a.length),r=0,o=a.length;r<o;r++)s=a[r],n[r]=e(t[s],s,r);return i(n)||(n=[]),n._isVList=!0,n}function ye(t,e,n,r){var o,i=this.$scopedSlots[t];i?(n=n||{},r&&(n=O(O({},r),n)),o=i(n)||e):o=this.$slots[t]||e;var a=n&&n.slot;return a?this.$createElement("template",{slot:a},o):o}function Ee(t){return Ft(this.$options,"filters",t)||D}function ke(t,e){return Array.isArray(t)?-1===t.indexOf(e):t!==e}function xe(t,e,n,r,o){var i=B.keyCodes[e]||n;return o&&r&&!B.keyCodes[e]?ke(o,r):i?ke(i,t):r?T(r)!==e:void 0}function we(t,e,n,r,o){if(n)if(c(n)){var i;Array.isArray(n)&&(n=N(n));var a=function(a){if("class"===a||"style"===a||b(a))i=t;else{var s=t.attrs&&t.attrs.type;i=r||B.mustUseProp(e,s,a)?t.domProps||(t.domProps={}):t.attrs||(t.attrs={})}var c=w(a),u=T(a);c in i||u in i||(i[a]=n[a],o&&((t.on||(t.on={}))["update:"+a]=function(t){n[a]=t}))};for(var s in n)a(s)}else;return t}function Ce(t,e){var n=this._staticTrees||(this._staticTrees=[]),r=n[t];return r&&!e?r:(Te(r=n[t]=this.$options.staticRenderFns[t].call(this._renderProxy,null,this),"__static__"+t,!1),r)}function Ae(t,e,n){return Te(t,"__once__"+e+(n?"_"+n:""),!0),t}function Te(t,e,n){if(Array.isArray(t))for(var r=0;r<t.length;r++)t[r]&&"string"!=typeof t[r]&&Se(t[r],e+"_"+r,n);else Se(t,e,n)}function Se(t,e,n){t.isStatic=!0,t.key=e,t.isOnce=n}function Re(t,e){if(e)if(l(e)){var n=t.on=t.on?O({},t.on):{};for(var r in e){var o=n[r],i=e[r];n[r]=o?[].concat(o,i):i}}else;return t}function Oe(t,e,n,r){e=e||{$stable:!n};for(var o=0;o<t.length;o++){var i=t[o];Array.isArray(i)?Oe(i,e,n):i&&(i.proxy&&(i.fn.proxy=!0),e[i.key]=i.fn)}return r&&(e.$key=r),e}function Ne(t,e){for(var n=0;n<e.length;n+=2){var r=e[n];"string"==typeof r&&r&&(t[e[n]]=e[n+1])}return t}function Le(t,e){return"string"==typeof t?e+t:t}function Ie(t){t._o=Ae,t._n=m,t._s=h,t._l=_e,t._t=ye,t._q=M,t._i=P,t._m=Ce,t._f=Ee,t._k=xe,t._b=we,t._v=yt,t._e=_t,t._u=Oe,t._g=Re,t._d=Ne,t._p=Le}function De(t,e,n,o,i){var s,c=this,u=i.options;E(o,"_uid")?(s=Object.create(o))._original=o:(s=o,o=o._original);var l=a(u._compiled),f=!l;this.data=t,this.props=e,this.children=n,this.parent=o,this.listeners=t.on||r,this.injections=de(u.inject,o),this.slots=function(){return c.$slots||ge(t.scopedSlots,c.$slots=he(n,o)),c.$slots},Object.defineProperty(this,"scopedSlots",{enumerable:!0,get:function(){return ge(t.scopedSlots,this.slots())}}),l&&(this.$options=u,this.$slots=this.slots(),this.$scopedSlots=ge(t.scopedSlots,this.$slots)),u._scopeId?this._c=function(t,e,n,r){var i=qe(s,t,e,n,r,f);return i&&!Array.isArray(i)&&(i.fnScopeId=u._scopeId,i.fnContext=o),i}:this._c=function(t,e,n,r){return qe(s,t,e,n,r,f)}}function Me(t,e,n,r,o){var i=Et(t);return i.fnContext=n,i.fnOptions=r,e.slot&&((i.data||(i.data={})).slot=e.slot),i}function Pe(t,e){for(var n in e)t[w(n)]=e[n]}Ie(De.prototype);var je={init:function(t,e){if(t.componentInstance&&!t.componentInstance._isDestroyed&&t.data.keepAlive){var n=t;je.prepatch(n,n)}else{(t.componentInstance=function(t,e){var n={_isComponent:!0,_parentVnode:t,parent:e},r=t.data.inlineTemplate;i(r)&&(n.render=r.render,n.staticRenderFns=r.staticRenderFns);return new t.componentOptions.Ctor(n)}(t,Qe)).$mount(e?t.elm:void 0,e)}},prepatch:function(t,e){var n=e.componentOptions;!function(t,e,n,o,i){0;var a=o.data.scopedSlots,s=t.$scopedSlots,c=!!(a&&!a.$stable||s!==r&&!s.$stable||a&&t.$scopedSlots.$key!==a.$key),u=!!(i||t.$options._renderChildren||c);t.$options._parentVnode=o,t.$vnode=o,t._vnode&&(t._vnode.parent=o);if(t.$options._renderChildren=i,t.$attrs=o.data.attrs||r,t.$listeners=n||r,e&&t.$options.props){At(!1);for(var l=t._props,f=t.$options._propKeys||[],p=0;p<f.length;p++){var d=f[p],h=t.$options.props;l[d]=$t(d,h,e,t)}At(!0),t.$options.propsData=e}n=n||r;var m=t.$options._parentListeners;t.$options._parentListeners=n,Je(t,n,m),u&&(t.$slots=he(i,o.context),t.$forceUpdate());0}(e.componentInstance=t.componentInstance,n.propsData,n.listeners,e,n.children)},insert:function(t){var e,n=t.context,r=t.componentInstance;r._isMounted||(r._isMounted=!0,rn(r,"mounted")),t.data.keepAlive&&(n._isMounted?((e=r)._inactive=!1,an.push(e)):nn(r,!0))},destroy:function(t){var e=t.componentInstance;e._isDestroyed||(t.data.keepAlive?function t(e,n){if(n&&(e._directInactive=!0,en(e)))return;if(!e._inactive){e._inactive=!0;for(var r=0;r<e.$children.length;r++)t(e.$children[r]);rn(e,"deactivated")}}(e,!0):e.$destroy())}},Ue=Object.keys(je);function Fe(t,e,n,s,u){if(!o(t)){var l=n.$options._base;if(c(t)&&(t=l.extend(t)),"function"==typeof t){var f;if(o(t.cid)&&void 0===(t=function(t,e){if(a(t.error)&&i(t.errorComp))return t.errorComp;if(i(t.resolved))return t.resolved;var n=Ge;n&&i(t.owners)&&-1===t.owners.indexOf(n)&&t.owners.push(n);if(a(t.loading)&&i(t.loadingComp))return t.loadingComp;if(n&&!i(t.owners)){var r=t.owners=[n],s=!0,u=null,l=null;n.$on("hook:destroyed",function(){return _(r,n)});var f=function(t){for(var e=0,n=r.length;e<n;e++)r[e].$forceUpdate();t&&(r.length=0,null!==u&&(clearTimeout(u),u=null),null!==l&&(clearTimeout(l),l=null))},p=j(function(n){t.resolved=Ve(n,e),s?r.length=0:f(!0)}),h=j(function(e){i(t.errorComp)&&(t.error=!0,f(!0))}),m=t(p,h);return c(m)&&(d(m)?o(t.resolved)&&m.then(p,h):d(m.component)&&(m.component.then(p,h),i(m.error)&&(t.errorComp=Ve(m.error,e)),i(m.loading)&&(t.loadingComp=Ve(m.loading,e),0===m.delay?t.loading=!0:u=setTimeout(function(){u=null,o(t.resolved)&&o(t.error)&&(t.loading=!0,f(!1))},m.delay||200)),i(m.timeout)&&(l=setTimeout(function(){l=null,o(t.resolved)&&h(null)},m.timeout)))),s=!1,t.loading?t.loadingComp:t.resolved}}(f=t,l)))return function(t,e,n,r,o){var i=_t();return i.asyncFactory=t,i.asyncMeta={data:e,context:n,children:r,tag:o},i}(f,e,n,s,u);e=e||{},An(t),i(e.model)&&function(t,e){var n=t.model&&t.model.prop||"value",r=t.model&&t.model.event||"input";(e.attrs||(e.attrs={}))[n]=e.model.value;var o=e.on||(e.on={}),a=o[r],s=e.model.callback;i(a)?(Array.isArray(a)?-1===a.indexOf(s):a!==s)&&(o[r]=[s].concat(a)):o[r]=s}(t.options,e);var p=function(t,e,n){var r=e.options.props;if(!o(r)){var a={},s=t.attrs,c=t.props;if(i(s)||i(c))for(var u in r){var l=T(u);le(a,c,u,l,!0)||le(a,s,u,l,!1)}return a}}(e,t);if(a(t.options.functional))return function(t,e,n,o,a){var s=t.options,c={},u=s.props;if(i(u))for(var l in u)c[l]=$t(l,u,e||r);else i(n.attrs)&&Pe(c,n.attrs),i(n.props)&&Pe(c,n.props);var f=new De(n,c,a,o,t),p=s.render.call(null,f._c,f);if(p instanceof vt)return Me(p,n,f.parent,s);if(Array.isArray(p)){for(var d=fe(p)||[],h=new Array(d.length),m=0;m<d.length;m++)h[m]=Me(d[m],n,f.parent,s);return h}}(t,p,e,n,s);var h=e.on;if(e.on=e.nativeOn,a(t.options.abstract)){var m=e.slot;e={},m&&(e.slot=m)}!function(t){for(var e=t.hook||(t.hook={}),n=0;n<Ue.length;n++){var r=Ue[n],o=e[r],i=je[r];o===i||o&&o._merged||(e[r]=o?$e(i,o):i)}}(e);var g=t.options.name||u;return new vt("vue-component-"+t.cid+(g?"-"+g:""),e,void 0,void 0,void 0,n,{Ctor:t,propsData:p,listeners:h,tag:u,children:s},f)}}}function $e(t,e){var n=function(n,r){t(n,r),e(n,r)};return n._merged=!0,n}var Be=1,ze=2;function qe(t,e,n,r,u,l){return(Array.isArray(n)||s(n))&&(u=r,r=n,n=void 0),a(l)&&(u=ze),function(t,e,n,r,s){if(i(n)&&i(n.__ob__))return _t();i(n)&&i(n.is)&&(e=n.is);if(!e)return _t();0;Array.isArray(r)&&"function"==typeof r[0]&&((n=n||{}).scopedSlots={default:r[0]},r.length=0);s===ze?r=fe(r):s===Be&&(r=function(t){for(var e=0;e<t.length;e++)if(Array.isArray(t[e]))return Array.prototype.concat.apply([],t);return t}(r));var u,l;if("string"==typeof e){var f;l=t.$vnode&&t.$vnode.ns||B.getTagNamespace(e),u=B.isReservedTag(e)?new vt(B.parsePlatformTagName(e),n,r,void 0,void 0,t):n&&n.pre||!i(f=Ft(t.$options,"components",e))?new vt(e,n,r,void 0,void 0,t):Fe(f,n,t,r,e)}else u=Fe(e,n,t,r);return Array.isArray(u)?u:i(u)?(i(l)&&function t(e,n,r){e.ns=n;"foreignObject"===e.tag&&(n=void 0,r=!0);if(i(e.children))for(var s=0,c=e.children.length;s<c;s++){var u=e.children[s];i(u.tag)&&(o(u.ns)||a(r)&&"svg"!==u.tag)&&t(u,n,r)}}(u,l),i(n)&&function(t){c(t.style)&&ie(t.style);c(t.class)&&ie(t.class)}(n),u):_t()}(t,e,n,r,u)}var He,Ge=null;function Ve(t,e){return(t.__esModule||lt&&"Module"===t[Symbol.toStringTag])&&(t=t.default),c(t)?e.extend(t):t}function We(t){return t.isComment&&t.asyncFactory}function Ye(t){if(Array.isArray(t))for(var e=0;e<t.length;e++){var n=t[e];if(i(n)&&(i(n.componentOptions)||We(n)))return n}}function Ke(t,e){He.$on(t,e)}function Xe(t,e){He.$off(t,e)}function Ze(t,e){var n=He;return function r(){var o=e.apply(null,arguments);null!==o&&n.$off(t,r)}}function Je(t,e,n){He=t,ce(e,n||{},Ke,Xe,Ze,t),He=void 0}var Qe=null;function tn(t){var e=Qe;return Qe=t,function(){Qe=e}}function en(t){for(;t&&(t=t.$parent);)if(t._inactive)return!0;return!1}function nn(t,e){if(e){if(t._directInactive=!1,en(t))return}else if(t._directInactive)return;if(t._inactive||null===t._inactive){t._inactive=!1;for(var n=0;n<t.$children.length;n++)nn(t.$children[n]);rn(t,"activated")}}function rn(t,e){mt();var n=t.$options[e],r=e+" hook";if(n)for(var o=0,i=n.length;o<i;o++)Gt(n[o],t,null,t,r);t._hasHookEvent&&t.$emit("hook:"+e),gt()}var on=[],an=[],sn={},cn=!1,un=!1,ln=0;var fn=0,pn=Date.now;if(Y&&!J){var dn=window.performance;dn&&"function"==typeof dn.now&&pn()>document.createEvent("Event").timeStamp&&(pn=function(){return dn.now()})}function hn(){var t,e;for(fn=pn(),un=!0,on.sort(function(t,e){return t.id-e.id}),ln=0;ln<on.length;ln++)(t=on[ln]).before&&t.before(),e=t.id,sn[e]=null,t.run();var n=an.slice(),r=on.slice();ln=on.length=an.length=0,sn={},cn=un=!1,function(t){for(var e=0;e<t.length;e++)t[e]._inactive=!0,nn(t[e],!0)}(n),function(t){var e=t.length;for(;e--;){var n=t[e],r=n.vm;r._watcher===n&&r._isMounted&&!r._isDestroyed&&rn(r,"updated")}}(r),st&&B.devtools&&st.emit("flush")}var mn=0,gn=function(t,e,n,r,o){this.vm=t,o&&(t._watcher=this),t._watchers.push(this),r?(this.deep=!!r.deep,this.user=!!r.user,this.lazy=!!r.lazy,this.sync=!!r.sync,this.before=r.before):this.deep=this.user=this.lazy=this.sync=!1,this.cb=n,this.id=++mn,this.active=!0,this.dirty=this.lazy,this.deps=[],this.newDeps=[],this.depIds=new ut,this.newDepIds=new ut,this.expression="","function"==typeof e?this.getter=e:(this.getter=function(t){if(!G.test(t)){var e=t.split(".");return function(t){for(var n=0;n<e.length;n++){if(!t)return;t=t[e[n]]}return t}}}(e),this.getter||(this.getter=L)),this.value=this.lazy?void 0:this.get()};gn.prototype.get=function(){var t;mt(this);var e=this.vm;try{t=this.getter.call(e,e)}catch(t){if(!this.user)throw t;Ht(t,e,'getter for watcher "'+this.expression+'"')}finally{this.deep&&ie(t),gt(),this.cleanupDeps()}return t},gn.prototype.addDep=function(t){var e=t.id;this.newDepIds.has(e)||(this.newDepIds.add(e),this.newDeps.push(t),this.depIds.has(e)||t.addSub(this))},gn.prototype.cleanupDeps=function(){for(var t=this.deps.length;t--;){var e=this.deps[t];this.newDepIds.has(e.id)||e.removeSub(this)}var n=this.depIds;this.depIds=this.newDepIds,this.newDepIds=n,this.newDepIds.clear(),n=this.deps,this.deps=this.newDeps,this.newDeps=n,this.newDeps.length=0},gn.prototype.update=function(){this.lazy?this.dirty=!0:this.sync?this.run():function(t){var e=t.id;if(null==sn[e]){if(sn[e]=!0,un){for(var n=on.length-1;n>ln&&on[n].id>t.id;)n--;on.splice(n+1,0,t)}else on.push(t);cn||(cn=!0,re(hn))}}(this)},gn.prototype.run=function(){if(this.active){var t=this.get();if(t!==this.value||c(t)||this.deep){var e=this.value;if(this.value=t,this.user)try{this.cb.call(this.vm,t,e)}catch(t){Ht(t,this.vm,'callback for watcher "'+this.expression+'"')}else this.cb.call(this.vm,t,e)}}},gn.prototype.evaluate=function(){this.value=this.get(),this.dirty=!1},gn.prototype.depend=function(){for(var t=this.deps.length;t--;)this.deps[t].depend()},gn.prototype.teardown=function(){if(this.active){this.vm._isBeingDestroyed||_(this.vm._watchers,this);for(var t=this.deps.length;t--;)this.deps[t].removeSub(this);this.active=!1}};var vn={enumerable:!0,configurable:!0,get:L,set:L};function bn(t,e,n){vn.get=function(){return this[e][n]},vn.set=function(t){this[e][n]=t},Object.defineProperty(t,n,vn)}function _n(t){t._watchers=[];var e=t.$options;e.props&&function(t,e){var n=t.$options.propsData||{},r=t._props={},o=t.$options._propKeys=[];t.$parent&&At(!1);var i=function(i){o.push(i);var a=$t(i,e,n,t);Rt(r,i,a),i in t||bn(t,"_props",i)};for(var a in e)i(a);At(!0)}(t,e.props),e.methods&&function(t,e){t.$options.props;for(var n in e)t[n]="function"!=typeof e[n]?L:S(e[n],t)}(t,e.methods),e.data?function(t){var e=t.$options.data;l(e=t._data="function"==typeof e?function(t,e){mt();try{return t.call(e,e)}catch(t){return Ht(t,e,"data()"),{}}finally{gt()}}(e,t):e||{})||(e={});var n=Object.keys(e),r=t.$options.props,o=(t.$options.methods,n.length);for(;o--;){var i=n[o];0,r&&E(r,i)||q(i)||bn(t,"_data",i)}St(e,!0)}(t):St(t._data={},!0),e.computed&&function(t,e){var n=t._computedWatchers=Object.create(null),r=at();for(var o in e){var i=e[o],a="function"==typeof i?i:i.get;0,r||(n[o]=new gn(t,a||L,L,yn)),o in t||En(t,o,i)}}(t,e.computed),e.watch&&e.watch!==rt&&function(t,e){for(var n in e){var r=e[n];if(Array.isArray(r))for(var o=0;o<r.length;o++)wn(t,n,r[o]);else wn(t,n,r)}}(t,e.watch)}var yn={lazy:!0};function En(t,e,n){var r=!at();"function"==typeof n?(vn.get=r?kn(e):xn(n),vn.set=L):(vn.get=n.get?r&&!1!==n.cache?kn(e):xn(n.get):L,vn.set=n.set||L),Object.defineProperty(t,e,vn)}function kn(t){return function(){var e=this._computedWatchers&&this._computedWatchers[t];if(e)return e.dirty&&e.evaluate(),dt.target&&e.depend(),e.value}}function xn(t){return function(){return t.call(this,this)}}function wn(t,e,n,r){return l(n)&&(r=n,n=n.handler),"string"==typeof n&&(n=t[n]),t.$watch(e,n,r)}var Cn=0;function An(t){var e=t.options;if(t.super){var n=An(t.super);if(n!==t.superOptions){t.superOptions=n;var r=function(t){var e,n=t.options,r=t.sealedOptions;for(var o in n)n[o]!==r[o]&&(e||(e={}),e[o]=n[o]);return e}(t);r&&O(t.extendOptions,r),(e=t.options=Ut(n,t.extendOptions)).name&&(e.components[e.name]=t)}}return e}function Tn(t){this._init(t)}function Sn(t){t.cid=0;var e=1;t.extend=function(t){t=t||{};var n=this,r=n.cid,o=t._Ctor||(t._Ctor={});if(o[r])return o[r];var i=t.name||n.options.name;var a=function(t){this._init(t)};return(a.prototype=Object.create(n.prototype)).constructor=a,a.cid=e++,a.options=Ut(n.options,t),a.super=n,a.options.props&&function(t){var e=t.options.props;for(var n in e)bn(t.prototype,"_props",n)}(a),a.options.computed&&function(t){var e=t.options.computed;for(var n in e)En(t.prototype,n,e[n])}(a),a.extend=n.extend,a.mixin=n.mixin,a.use=n.use,F.forEach(function(t){a[t]=n[t]}),i&&(a.options.components[i]=a),a.superOptions=n.options,a.extendOptions=t,a.sealedOptions=O({},a.options),o[r]=a,a}}function Rn(t){return t&&(t.Ctor.options.name||t.tag)}function On(t,e){return Array.isArray(t)?t.indexOf(e)>-1:"string"==typeof t?t.split(",").indexOf(e)>-1:!!f(t)&&t.test(e)}function Nn(t,e){var n=t.cache,r=t.keys,o=t._vnode;for(var i in n){var a=n[i];if(a){var s=Rn(a.componentOptions);s&&!e(s)&&Ln(n,i,r,o)}}}function Ln(t,e,n,r){var o=t[e];!o||r&&o.tag===r.tag||o.componentInstance.$destroy(),t[e]=null,_(n,e)}!function(t){t.prototype._init=function(t){var e=this;e._uid=Cn++,e._isVue=!0,t&&t._isComponent?function(t,e){var n=t.$options=Object.create(t.constructor.options),r=e._parentVnode;n.parent=e.parent,n._parentVnode=r;var o=r.componentOptions;n.propsData=o.propsData,n._parentListeners=o.listeners,n._renderChildren=o.children,n._componentTag=o.tag,e.render&&(n.render=e.render,n.staticRenderFns=e.staticRenderFns)}(e,t):e.$options=Ut(An(e.constructor),t||{},e),e._renderProxy=e,e._self=e,function(t){var e=t.$options,n=e.parent;if(n&&!e.abstract){for(;n.$options.abstract&&n.$parent;)n=n.$parent;n.$children.push(t)}t.$parent=n,t.$root=n?n.$root:t,t.$children=[],t.$refs={},t._watcher=null,t._inactive=null,t._directInactive=!1,t._isMounted=!1,t._isDestroyed=!1,t._isBeingDestroyed=!1}(e),function(t){t._events=Object.create(null),t._hasHookEvent=!1;var e=t.$options._parentListeners;e&&Je(t,e)}(e),function(t){t._vnode=null,t._staticTrees=null;var e=t.$options,n=t.$vnode=e._parentVnode,o=n&&n.context;t.$slots=he(e._renderChildren,o),t.$scopedSlots=r,t._c=function(e,n,r,o){return qe(t,e,n,r,o,!1)},t.$createElement=function(e,n,r,o){return qe(t,e,n,r,o,!0)};var i=n&&n.data;Rt(t,"$attrs",i&&i.attrs||r,null,!0),Rt(t,"$listeners",e._parentListeners||r,null,!0)}(e),rn(e,"beforeCreate"),function(t){var e=de(t.$options.inject,t);e&&(At(!1),Object.keys(e).forEach(function(n){Rt(t,n,e[n])}),At(!0))}(e),_n(e),function(t){var e=t.$options.provide;e&&(t._provided="function"==typeof e?e.call(t):e)}(e),rn(e,"created"),e.$options.el&&e.$mount(e.$options.el)}}(Tn),function(t){var e={get:function(){return this._data}},n={get:function(){return this._props}};Object.defineProperty(t.prototype,"$data",e),Object.defineProperty(t.prototype,"$props",n),t.prototype.$set=Ot,t.prototype.$delete=Nt,t.prototype.$watch=function(t,e,n){if(l(e))return wn(this,t,e,n);(n=n||{}).user=!0;var r=new gn(this,t,e,n);if(n.immediate)try{e.call(this,r.value)}catch(t){Ht(t,this,'callback for immediate watcher "'+r.expression+'"')}return function(){r.teardown()}}}(Tn),function(t){var e=/^hook:/;t.prototype.$on=function(t,n){var r=this;if(Array.isArray(t))for(var o=0,i=t.length;o<i;o++)r.$on(t[o],n);else(r._events[t]||(r._events[t]=[])).push(n),e.test(t)&&(r._hasHookEvent=!0);return r},t.prototype.$once=function(t,e){var n=this;function r(){n.$off(t,r),e.apply(n,arguments)}return r.fn=e,n.$on(t,r),n},t.prototype.$off=function(t,e){var n=this;if(!arguments.length)return n._events=Object.create(null),n;if(Array.isArray(t)){for(var r=0,o=t.length;r<o;r++)n.$off(t[r],e);return n}var i,a=n._events[t];if(!a)return n;if(!e)return n._events[t]=null,n;for(var s=a.length;s--;)if((i=a[s])===e||i.fn===e){a.splice(s,1);break}return n},t.prototype.$emit=function(t){var e=this,n=e._events[t];if(n){n=n.length>1?R(n):n;for(var r=R(arguments,1),o='event handler for "'+t+'"',i=0,a=n.length;i<a;i++)Gt(n[i],e,r,e,o)}return e}}(Tn),function(t){t.prototype._update=function(t,e){var n=this,r=n.$el,o=n._vnode,i=tn(n);n._vnode=t,n.$el=o?n.__patch__(o,t):n.__patch__(n.$el,t,e,!1),i(),r&&(r.__vue__=null),n.$el&&(n.$el.__vue__=n),n.$vnode&&n.$parent&&n.$vnode===n.$parent._vnode&&(n.$parent.$el=n.$el)},t.prototype.$forceUpdate=function(){this._watcher&&this._watcher.update()},t.prototype.$destroy=function(){var t=this;if(!t._isBeingDestroyed){rn(t,"beforeDestroy"),t._isBeingDestroyed=!0;var e=t.$parent;!e||e._isBeingDestroyed||t.$options.abstract||_(e.$children,t),t._watcher&&t._watcher.teardown();for(var n=t._watchers.length;n--;)t._watchers[n].teardown();t._data.__ob__&&t._data.__ob__.vmCount--,t._isDestroyed=!0,t.__patch__(t._vnode,null),rn(t,"destroyed"),t.$off(),t.$el&&(t.$el.__vue__=null),t.$vnode&&(t.$vnode.parent=null)}}}(Tn),function(t){Ie(t.prototype),t.prototype.$nextTick=function(t){return re(t,this)},t.prototype._render=function(){var t,e=this,n=e.$options,r=n.render,o=n._parentVnode;o&&(e.$scopedSlots=ge(o.data.scopedSlots,e.$slots,e.$scopedSlots)),e.$vnode=o;try{Ge=e,t=r.call(e._renderProxy,e.$createElement)}catch(n){Ht(n,e,"render"),t=e._vnode}finally{Ge=null}return Array.isArray(t)&&1===t.length&&(t=t[0]),t instanceof vt||(t=_t()),t.parent=o,t}}(Tn);var In=[String,RegExp,Array],Dn={KeepAlive:{name:"keep-alive",abstract:!0,props:{include:In,exclude:In,max:[String,Number]},created:function(){this.cache=Object.create(null),this.keys=[]},destroyed:function(){for(var t in this.cache)Ln(this.cache,t,this.keys)},mounted:function(){var t=this;this.$watch("include",function(e){Nn(t,function(t){return On(e,t)})}),this.$watch("exclude",function(e){Nn(t,function(t){return!On(e,t)})})},render:function(){var t=this.$slots.default,e=Ye(t),n=e&&e.componentOptions;if(n){var r=Rn(n),o=this.include,i=this.exclude;if(o&&(!r||!On(o,r))||i&&r&&On(i,r))return e;var a=this.cache,s=this.keys,c=null==e.key?n.Ctor.cid+(n.tag?"::"+n.tag:""):e.key;a[c]?(e.componentInstance=a[c].componentInstance,_(s,c),s.push(c)):(a[c]=e,s.push(c),this.max&&s.length>parseInt(this.max)&&Ln(a,s[0],s,this._vnode)),e.data.keepAlive=!0}return e||t&&t[0]}}};!function(t){var e={get:function(){return B}};Object.defineProperty(t,"config",e),t.util={warn:ft,extend:O,mergeOptions:Ut,defineReactive:Rt},t.set=Ot,t.delete=Nt,t.nextTick=re,t.observable=function(t){return St(t),t},t.options=Object.create(null),F.forEach(function(e){t.options[e+"s"]=Object.create(null)}),t.options._base=t,O(t.options.components,Dn),function(t){t.use=function(t){var e=this._installedPlugins||(this._installedPlugins=[]);if(e.indexOf(t)>-1)return this;var n=R(arguments,1);return n.unshift(this),"function"==typeof t.install?t.install.apply(t,n):"function"==typeof t&&t.apply(null,n),e.push(t),this}}(t),function(t){t.mixin=function(t){return this.options=Ut(this.options,t),this}}(t),Sn(t),function(t){F.forEach(function(e){t[e]=function(t,n){return n?("component"===e&&l(n)&&(n.name=n.name||t,n=this.options._base.extend(n)),"directive"===e&&"function"==typeof n&&(n={bind:n,update:n}),this.options[e+"s"][t]=n,n):this.options[e+"s"][t]}})}(t)}(Tn),Object.defineProperty(Tn.prototype,"$isServer",{get:at}),Object.defineProperty(Tn.prototype,"$ssrContext",{get:function(){return this.$vnode&&this.$vnode.ssrContext}}),Object.defineProperty(Tn,"FunctionalRenderContext",{value:De}),Tn.version="2.6.10";var Mn=g("style,class"),Pn=g("input,textarea,option,select,progress"),jn=function(t,e,n){return"value"===n&&Pn(t)&&"button"!==e||"selected"===n&&"option"===t||"checked"===n&&"input"===t||"muted"===n&&"video"===t},Un=g("contenteditable,draggable,spellcheck"),Fn=g("events,caret,typing,plaintext-only"),$n=function(t,e){return Gn(e)||"false"===e?"false":"contenteditable"===t&&Fn(e)?e:"true"},Bn=g("allowfullscreen,async,autofocus,autoplay,checked,compact,controls,declare,default,defaultchecked,defaultmuted,defaultselected,defer,disabled,enabled,formnovalidate,hidden,indeterminate,inert,ismap,itemscope,loop,multiple,muted,nohref,noresize,noshade,novalidate,nowrap,open,pauseonexit,readonly,required,reversed,scoped,seamless,selected,sortable,translate,truespeed,typemustmatch,visible"),zn="http://www.w3.org/1999/xlink",qn=function(t){return":"===t.charAt(5)&&"xlink"===t.slice(0,5)},Hn=function(t){return qn(t)?t.slice(6,t.length):""},Gn=function(t){return null==t||!1===t};function Vn(t){for(var e=t.data,n=t,r=t;i(r.componentInstance);)(r=r.componentInstance._vnode)&&r.data&&(e=Wn(r.data,e));for(;i(n=n.parent);)n&&n.data&&(e=Wn(e,n.data));return function(t,e){if(i(t)||i(e))return Yn(t,Kn(e));return""}(e.staticClass,e.class)}function Wn(t,e){return{staticClass:Yn(t.staticClass,e.staticClass),class:i(t.class)?[t.class,e.class]:e.class}}function Yn(t,e){return t?e?t+" "+e:t:e||""}function Kn(t){return Array.isArray(t)?function(t){for(var e,n="",r=0,o=t.length;r<o;r++)i(e=Kn(t[r]))&&""!==e&&(n&&(n+=" "),n+=e);return n}(t):c(t)?function(t){var e="";for(var n in t)t[n]&&(e&&(e+=" "),e+=n);return e}(t):"string"==typeof t?t:""}var Xn={svg:"http://www.w3.org/2000/svg",math:"http://www.w3.org/1998/Math/MathML"},Zn=g("html,body,base,head,link,meta,style,title,address,article,aside,footer,header,h1,h2,h3,h4,h5,h6,hgroup,nav,section,div,dd,dl,dt,figcaption,figure,picture,hr,img,li,main,ol,p,pre,ul,a,b,abbr,bdi,bdo,br,cite,code,data,dfn,em,i,kbd,mark,q,rp,rt,rtc,ruby,s,samp,small,span,strong,sub,sup,time,u,var,wbr,area,audio,map,track,video,embed,object,param,source,canvas,script,noscript,del,ins,caption,col,colgroup,table,thead,tbody,td,th,tr,button,datalist,fieldset,form,input,label,legend,meter,optgroup,option,output,progress,select,textarea,details,dialog,menu,menuitem,summary,content,element,shadow,template,blockquote,iframe,tfoot"),Jn=g("svg,animate,circle,clippath,cursor,defs,desc,ellipse,filter,font-face,foreignObject,g,glyph,image,line,marker,mask,missing-glyph,path,pattern,polygon,polyline,rect,switch,symbol,text,textpath,tspan,use,view",!0),Qn=function(t){return Zn(t)||Jn(t)};function tr(t){return Jn(t)?"svg":"math"===t?"math":void 0}var er=Object.create(null);var nr=g("text,number,password,search,email,tel,url");function rr(t){if("string"==typeof t){var e=document.querySelector(t);return e||document.createElement("div")}return t}var or=Object.freeze({createElement:function(t,e){var n=document.createElement(t);return"select"!==t?n:(e.data&&e.data.attrs&&void 0!==e.data.attrs.multiple&&n.setAttribute("multiple","multiple"),n)},createElementNS:function(t,e){return document.createElementNS(Xn[t],e)},createTextNode:function(t){return document.createTextNode(t)},createComment:function(t){return document.createComment(t)},insertBefore:function(t,e,n){t.insertBefore(e,n)},removeChild:function(t,e){t.removeChild(e)},appendChild:function(t,e){t.appendChild(e)},parentNode:function(t){return t.parentNode},nextSibling:function(t){return t.nextSibling},tagName:function(t){return t.tagName},setTextContent:function(t,e){t.textContent=e},setStyleScope:function(t,e){t.setAttribute(e,"")}}),ir={create:function(t,e){ar(e)},update:function(t,e){t.data.ref!==e.data.ref&&(ar(t,!0),ar(e))},destroy:function(t){ar(t,!0)}};function ar(t,e){var n=t.data.ref;if(i(n)){var r=t.context,o=t.componentInstance||t.elm,a=r.$refs;e?Array.isArray(a[n])?_(a[n],o):a[n]===o&&(a[n]=void 0):t.data.refInFor?Array.isArray(a[n])?a[n].indexOf(o)<0&&a[n].push(o):a[n]=[o]:a[n]=o}}var sr=new vt("",{},[]),cr=["create","activate","update","remove","destroy"];function ur(t,e){return t.key===e.key&&(t.tag===e.tag&&t.isComment===e.isComment&&i(t.data)===i(e.data)&&function(t,e){if("input"!==t.tag)return!0;var n,r=i(n=t.data)&&i(n=n.attrs)&&n.type,o=i(n=e.data)&&i(n=n.attrs)&&n.type;return r===o||nr(r)&&nr(o)}(t,e)||a(t.isAsyncPlaceholder)&&t.asyncFactory===e.asyncFactory&&o(e.asyncFactory.error))}function lr(t,e,n){var r,o,a={};for(r=e;r<=n;++r)i(o=t[r].key)&&(a[o]=r);return a}var fr={create:pr,update:pr,destroy:function(t){pr(t,sr)}};function pr(t,e){(t.data.directives||e.data.directives)&&function(t,e){var n,r,o,i=t===sr,a=e===sr,s=hr(t.data.directives,t.context),c=hr(e.data.directives,e.context),u=[],l=[];for(n in c)r=s[n],o=c[n],r?(o.oldValue=r.value,o.oldArg=r.arg,gr(o,"update",e,t),o.def&&o.def.componentUpdated&&l.push(o)):(gr(o,"bind",e,t),o.def&&o.def.inserted&&u.push(o));if(u.length){var f=function(){for(var n=0;n<u.length;n++)gr(u[n],"inserted",e,t)};i?ue(e,"insert",f):f()}l.length&&ue(e,"postpatch",function(){for(var n=0;n<l.length;n++)gr(l[n],"componentUpdated",e,t)});if(!i)for(n in s)c[n]||gr(s[n],"unbind",t,t,a)}(t,e)}var dr=Object.create(null);function hr(t,e){var n,r,o=Object.create(null);if(!t)return o;for(n=0;n<t.length;n++)(r=t[n]).modifiers||(r.modifiers=dr),o[mr(r)]=r,r.def=Ft(e.$options,"directives",r.name);return o}function mr(t){return t.rawName||t.name+"."+Object.keys(t.modifiers||{}).join(".")}function gr(t,e,n,r,o){var i=t.def&&t.def[e];if(i)try{i(n.elm,t,n,r,o)}catch(r){Ht(r,n.context,"directive "+t.name+" "+e+" hook")}}var vr=[ir,fr];function br(t,e){var n=e.componentOptions;if(!(i(n)&&!1===n.Ctor.options.inheritAttrs||o(t.data.attrs)&&o(e.data.attrs))){var r,a,s=e.elm,c=t.data.attrs||{},u=e.data.attrs||{};for(r in i(u.__ob__)&&(u=e.data.attrs=O({},u)),u)a=u[r],c[r]!==a&&_r(s,r,a);for(r in(J||tt)&&u.value!==c.value&&_r(s,"value",u.value),c)o(u[r])&&(qn(r)?s.removeAttributeNS(zn,Hn(r)):Un(r)||s.removeAttribute(r))}}function _r(t,e,n){t.tagName.indexOf("-")>-1?yr(t,e,n):Bn(e)?Gn(n)?t.removeAttribute(e):(n="allowfullscreen"===e&&"EMBED"===t.tagName?"true":e,t.setAttribute(e,n)):Un(e)?t.setAttribute(e,$n(e,n)):qn(e)?Gn(n)?t.removeAttributeNS(zn,Hn(e)):t.setAttributeNS(zn,e,n):yr(t,e,n)}function yr(t,e,n){if(Gn(n))t.removeAttribute(e);else{if(J&&!Q&&"TEXTAREA"===t.tagName&&"placeholder"===e&&""!==n&&!t.__ieph){var r=function(e){e.stopImmediatePropagation(),t.removeEventListener("input",r)};t.addEventListener("input",r),t.__ieph=!0}t.setAttribute(e,n)}}var Er={create:br,update:br};function kr(t,e){var n=e.elm,r=e.data,a=t.data;if(!(o(r.staticClass)&&o(r.class)&&(o(a)||o(a.staticClass)&&o(a.class)))){var s=Vn(e),c=n._transitionClasses;i(c)&&(s=Yn(s,Kn(c))),s!==n._prevClass&&(n.setAttribute("class",s),n._prevClass=s)}}var xr,wr,Cr,Ar,Tr,Sr,Rr={create:kr,update:kr},Or=/[\w).+\-_$\]]/;function Nr(t){var e,n,r,o,i,a=!1,s=!1,c=!1,u=!1,l=0,f=0,p=0,d=0;for(r=0;r<t.length;r++)if(n=e,e=t.charCodeAt(r),a)39===e&&92!==n&&(a=!1);else if(s)34===e&&92!==n&&(s=!1);else if(c)96===e&&92!==n&&(c=!1);else if(u)47===e&&92!==n&&(u=!1);else if(124!==e||124===t.charCodeAt(r+1)||124===t.charCodeAt(r-1)||l||f||p){switch(e){case 34:s=!0;break;case 39:a=!0;break;case 96:c=!0;break;case 40:p++;break;case 41:p--;break;case 91:f++;break;case 93:f--;break;case 123:l++;break;case 125:l--}if(47===e){for(var h=r-1,m=void 0;h>=0&&" "===(m=t.charAt(h));h--);m&&Or.test(m)||(u=!0)}}else void 0===o?(d=r+1,o=t.slice(0,r).trim()):g();function g(){(i||(i=[])).push(t.slice(d,r).trim()),d=r+1}if(void 0===o?o=t.slice(0,r).trim():0!==d&&g(),i)for(r=0;r<i.length;r++)o=Lr(o,i[r]);return o}function Lr(t,e){var n=e.indexOf("(");if(n<0)return'_f("'+e+'")('+t+")";var r=e.slice(0,n),o=e.slice(n+1);return'_f("'+r+'")('+t+(")"!==o?","+o:o)}function Ir(t,e){console.error("[Vue compiler]: "+t)}function Dr(t,e){return t?t.map(function(t){return t[e]}).filter(function(t){return t}):[]}function Mr(t,e,n,r,o){(t.props||(t.props=[])).push(Hr({name:e,value:n,dynamic:o},r)),t.plain=!1}function Pr(t,e,n,r,o){(o?t.dynamicAttrs||(t.dynamicAttrs=[]):t.attrs||(t.attrs=[])).push(Hr({name:e,value:n,dynamic:o},r)),t.plain=!1}function jr(t,e,n,r){t.attrsMap[e]=n,t.attrsList.push(Hr({name:e,value:n},r))}function Ur(t,e,n,r,o,i,a,s){(t.directives||(t.directives=[])).push(Hr({name:e,rawName:n,value:r,arg:o,isDynamicArg:i,modifiers:a},s)),t.plain=!1}function Fr(t,e,n){return n?"_p("+e+',"'+t+'")':t+e}function $r(t,e,n,o,i,a,s,c){var u;(o=o||r).right?c?e="("+e+")==='click'?'contextmenu':("+e+")":"click"===e&&(e="contextmenu",delete o.right):o.middle&&(c?e="("+e+")==='click'?'mouseup':("+e+")":"click"===e&&(e="mouseup")),o.capture&&(delete o.capture,e=Fr("!",e,c)),o.once&&(delete o.once,e=Fr("~",e,c)),o.passive&&(delete o.passive,e=Fr("&",e,c)),o.native?(delete o.native,u=t.nativeEvents||(t.nativeEvents={})):u=t.events||(t.events={});var l=Hr({value:n.trim(),dynamic:c},s);o!==r&&(l.modifiers=o);var f=u[e];Array.isArray(f)?i?f.unshift(l):f.push(l):u[e]=f?i?[l,f]:[f,l]:l,t.plain=!1}function Br(t,e,n){var r=zr(t,":"+e)||zr(t,"v-bind:"+e);if(null!=r)return Nr(r);if(!1!==n){var o=zr(t,e);if(null!=o)return JSON.stringify(o)}}function zr(t,e,n){var r;if(null!=(r=t.attrsMap[e]))for(var o=t.attrsList,i=0,a=o.length;i<a;i++)if(o[i].name===e){o.splice(i,1);break}return n&&delete t.attrsMap[e],r}function qr(t,e){for(var n=t.attrsList,r=0,o=n.length;r<o;r++){var i=n[r];if(e.test(i.name))return n.splice(r,1),i}}function Hr(t,e){return e&&(null!=e.start&&(t.start=e.start),null!=e.end&&(t.end=e.end)),t}function Gr(t,e,n){var r=n||{},o=r.number,i="$$v";r.trim&&(i="(typeof $$v === 'string'? $$v.trim(): $$v)"),o&&(i="_n("+i+")");var a=Vr(e,i);t.model={value:"("+e+")",expression:JSON.stringify(e),callback:"function ($$v) {"+a+"}"}}function Vr(t,e){var n=function(t){if(t=t.trim(),xr=t.length,t.indexOf("[")<0||t.lastIndexOf("]")<xr-1)return(Ar=t.lastIndexOf("."))>-1?{exp:t.slice(0,Ar),key:'"'+t.slice(Ar+1)+'"'}:{exp:t,key:null};wr=t,Ar=Tr=Sr=0;for(;!Yr();)Kr(Cr=Wr())?Zr(Cr):91===Cr&&Xr(Cr);return{exp:t.slice(0,Tr),key:t.slice(Tr+1,Sr)}}(t);return null===n.key?t+"="+e:"$set("+n.exp+", "+n.key+", "+e+")"}function Wr(){return wr.charCodeAt(++Ar)}function Yr(){return Ar>=xr}function Kr(t){return 34===t||39===t}function Xr(t){var e=1;for(Tr=Ar;!Yr();)if(Kr(t=Wr()))Zr(t);else if(91===t&&e++,93===t&&e--,0===e){Sr=Ar;break}}function Zr(t){for(var e=t;!Yr()&&(t=Wr())!==e;);}var Jr,Qr="__r",to="__c";function eo(t,e,n){var r=Jr;return function o(){var i=e.apply(null,arguments);null!==i&&oo(t,o,n,r)}}var no=Kt&&!(nt&&Number(nt[1])<=53);function ro(t,e,n,r){if(no){var o=fn,i=e;e=i._wrapper=function(t){if(t.target===t.currentTarget||t.timeStamp>=o||t.timeStamp<=0||t.target.ownerDocument!==document)return i.apply(this,arguments)}}Jr.addEventListener(t,e,ot?{capture:n,passive:r}:n)}function oo(t,e,n,r){(r||Jr).removeEventListener(t,e._wrapper||e,n)}function io(t,e){if(!o(t.data.on)||!o(e.data.on)){var n=e.data.on||{},r=t.data.on||{};Jr=e.elm,function(t){if(i(t[Qr])){var e=J?"change":"input";t[e]=[].concat(t[Qr],t[e]||[]),delete t[Qr]}i(t[to])&&(t.change=[].concat(t[to],t.change||[]),delete t[to])}(n),ce(n,r,ro,oo,eo,e.context),Jr=void 0}}var ao,so={create:io,update:io};function co(t,e){if(!o(t.data.domProps)||!o(e.data.domProps)){var n,r,a=e.elm,s=t.data.domProps||{},c=e.data.domProps||{};for(n in i(c.__ob__)&&(c=e.data.domProps=O({},c)),s)n in c||(a[n]="");for(n in c){if(r=c[n],"textContent"===n||"innerHTML"===n){if(e.children&&(e.children.length=0),r===s[n])continue;1===a.childNodes.length&&a.removeChild(a.childNodes[0])}if("value"===n&&"PROGRESS"!==a.tagName){a._value=r;var u=o(r)?"":String(r);uo(a,u)&&(a.value=u)}else if("innerHTML"===n&&Jn(a.tagName)&&o(a.innerHTML)){(ao=ao||document.createElement("div")).innerHTML="<svg>"+r+"</svg>";for(var l=ao.firstChild;a.firstChild;)a.removeChild(a.firstChild);for(;l.firstChild;)a.appendChild(l.firstChild)}else if(r!==s[n])try{a[n]=r}catch(t){}}}}function uo(t,e){return!t.composing&&("OPTION"===t.tagName||function(t,e){var n=!0;try{n=document.activeElement!==t}catch(t){}return n&&t.value!==e}(t,e)||function(t,e){var n=t.value,r=t._vModifiers;if(i(r)){if(r.number)return m(n)!==m(e);if(r.trim)return n.trim()!==e.trim()}return n!==e}(t,e))}var lo={create:co,update:co},fo=k(function(t){var e={},n=/:(.+)/;return t.split(/;(?![^(]*\))/g).forEach(function(t){if(t){var r=t.split(n);r.length>1&&(e[r[0].trim()]=r[1].trim())}}),e});function po(t){var e=ho(t.style);return t.staticStyle?O(t.staticStyle,e):e}function ho(t){return Array.isArray(t)?N(t):"string"==typeof t?fo(t):t}var mo,go=/^--/,vo=/\s*!important$/,bo=function(t,e,n){if(go.test(e))t.style.setProperty(e,n);else if(vo.test(n))t.style.setProperty(T(e),n.replace(vo,""),"important");else{var r=yo(e);if(Array.isArray(n))for(var o=0,i=n.length;o<i;o++)t.style[r]=n[o];else t.style[r]=n}},_o=["Webkit","Moz","ms"],yo=k(function(t){if(mo=mo||document.createElement("div").style,"filter"!==(t=w(t))&&t in mo)return t;for(var e=t.charAt(0).toUpperCase()+t.slice(1),n=0;n<_o.length;n++){var r=_o[n]+e;if(r in mo)return r}});function Eo(t,e){var n=e.data,r=t.data;if(!(o(n.staticStyle)&&o(n.style)&&o(r.staticStyle)&&o(r.style))){var a,s,c=e.elm,u=r.staticStyle,l=r.normalizedStyle||r.style||{},f=u||l,p=ho(e.data.style)||{};e.data.normalizedStyle=i(p.__ob__)?O({},p):p;var d=function(t,e){var n,r={};if(e)for(var o=t;o.componentInstance;)(o=o.componentInstance._vnode)&&o.data&&(n=po(o.data))&&O(r,n);(n=po(t.data))&&O(r,n);for(var i=t;i=i.parent;)i.data&&(n=po(i.data))&&O(r,n);return r}(e,!0);for(s in f)o(d[s])&&bo(c,s,"");for(s in d)(a=d[s])!==f[s]&&bo(c,s,null==a?"":a)}}var ko={create:Eo,update:Eo},xo=/\s+/;function wo(t,e){if(e&&(e=e.trim()))if(t.classList)e.indexOf(" ")>-1?e.split(xo).forEach(function(e){return t.classList.add(e)}):t.classList.add(e);else{var n=" "+(t.getAttribute("class")||"")+" ";n.indexOf(" "+e+" ")<0&&t.setAttribute("class",(n+e).trim())}}function Co(t,e){if(e&&(e=e.trim()))if(t.classList)e.indexOf(" ")>-1?e.split(xo).forEach(function(e){return t.classList.remove(e)}):t.classList.remove(e),t.classList.length||t.removeAttribute("class");else{for(var n=" "+(t.getAttribute("class")||"")+" ",r=" "+e+" ";n.indexOf(r)>=0;)n=n.replace(r," ");(n=n.trim())?t.setAttribute("class",n):t.removeAttribute("class")}}function Ao(t){if(t){if("object"==typeof t){var e={};return!1!==t.css&&O(e,To(t.name||"v")),O(e,t),e}return"string"==typeof t?To(t):void 0}}var To=k(function(t){return{enterClass:t+"-enter",enterToClass:t+"-enter-to",enterActiveClass:t+"-enter-active",leaveClass:t+"-leave",leaveToClass:t+"-leave-to",leaveActiveClass:t+"-leave-active"}}),So=Y&&!Q,Ro="transition",Oo="animation",No="transition",Lo="transitionend",Io="animation",Do="animationend";So&&(void 0===window.ontransitionend&&void 0!==window.onwebkittransitionend&&(No="WebkitTransition",Lo="webkitTransitionEnd"),void 0===window.onanimationend&&void 0!==window.onwebkitanimationend&&(Io="WebkitAnimation",Do="webkitAnimationEnd"));var Mo=Y?window.requestAnimationFrame?window.requestAnimationFrame.bind(window):setTimeout:function(t){return t()};function Po(t){Mo(function(){Mo(t)})}function jo(t,e){var n=t._transitionClasses||(t._transitionClasses=[]);n.indexOf(e)<0&&(n.push(e),wo(t,e))}function Uo(t,e){t._transitionClasses&&_(t._transitionClasses,e),Co(t,e)}function Fo(t,e,n){var r=Bo(t,e),o=r.type,i=r.timeout,a=r.propCount;if(!o)return n();var s=o===Ro?Lo:Do,c=0,u=function(){t.removeEventListener(s,l),n()},l=function(e){e.target===t&&++c>=a&&u()};setTimeout(function(){c<a&&u()},i+1),t.addEventListener(s,l)}var $o=/\b(transform|all)(,|$)/;function Bo(t,e){var n,r=window.getComputedStyle(t),o=(r[No+"Delay"]||"").split(", "),i=(r[No+"Duration"]||"").split(", "),a=zo(o,i),s=(r[Io+"Delay"]||"").split(", "),c=(r[Io+"Duration"]||"").split(", "),u=zo(s,c),l=0,f=0;return e===Ro?a>0&&(n=Ro,l=a,f=i.length):e===Oo?u>0&&(n=Oo,l=u,f=c.length):f=(n=(l=Math.max(a,u))>0?a>u?Ro:Oo:null)?n===Ro?i.length:c.length:0,{type:n,timeout:l,propCount:f,hasTransform:n===Ro&&$o.test(r[No+"Property"])}}function zo(t,e){for(;t.length<e.length;)t=t.concat(t);return Math.max.apply(null,e.map(function(e,n){return qo(e)+qo(t[n])}))}function qo(t){return 1e3*Number(t.slice(0,-1).replace(",","."))}function Ho(t,e){var n=t.elm;i(n._leaveCb)&&(n._leaveCb.cancelled=!0,n._leaveCb());var r=Ao(t.data.transition);if(!o(r)&&!i(n._enterCb)&&1===n.nodeType){for(var a=r.css,s=r.type,u=r.enterClass,l=r.enterToClass,f=r.enterActiveClass,p=r.appearClass,d=r.appearToClass,h=r.appearActiveClass,g=r.beforeEnter,v=r.enter,b=r.afterEnter,_=r.enterCancelled,y=r.beforeAppear,E=r.appear,k=r.afterAppear,x=r.appearCancelled,w=r.duration,C=Qe,A=Qe.$vnode;A&&A.parent;)C=A.context,A=A.parent;var T=!C._isMounted||!t.isRootInsert;if(!T||E||""===E){var S=T&&p?p:u,R=T&&h?h:f,O=T&&d?d:l,N=T&&y||g,L=T&&"function"==typeof E?E:v,I=T&&k||b,D=T&&x||_,M=m(c(w)?w.enter:w);0;var P=!1!==a&&!Q,U=Wo(L),F=n._enterCb=j(function(){P&&(Uo(n,O),Uo(n,R)),F.cancelled?(P&&Uo(n,S),D&&D(n)):I&&I(n),n._enterCb=null});t.data.show||ue(t,"insert",function(){var e=n.parentNode,r=e&&e._pending&&e._pending[t.key];r&&r.tag===t.tag&&r.elm._leaveCb&&r.elm._leaveCb(),L&&L(n,F)}),N&&N(n),P&&(jo(n,S),jo(n,R),Po(function(){Uo(n,S),F.cancelled||(jo(n,O),U||(Vo(M)?setTimeout(F,M):Fo(n,s,F)))})),t.data.show&&(e&&e(),L&&L(n,F)),P||U||F()}}}function Go(t,e){var n=t.elm;i(n._enterCb)&&(n._enterCb.cancelled=!0,n._enterCb());var r=Ao(t.data.transition);if(o(r)||1!==n.nodeType)return e();if(!i(n._leaveCb)){var a=r.css,s=r.type,u=r.leaveClass,l=r.leaveToClass,f=r.leaveActiveClass,p=r.beforeLeave,d=r.leave,h=r.afterLeave,g=r.leaveCancelled,v=r.delayLeave,b=r.duration,_=!1!==a&&!Q,y=Wo(d),E=m(c(b)?b.leave:b);0;var k=n._leaveCb=j(function(){n.parentNode&&n.parentNode._pending&&(n.parentNode._pending[t.key]=null),_&&(Uo(n,l),Uo(n,f)),k.cancelled?(_&&Uo(n,u),g&&g(n)):(e(),h&&h(n)),n._leaveCb=null});v?v(x):x()}function x(){k.cancelled||(!t.data.show&&n.parentNode&&((n.parentNode._pending||(n.parentNode._pending={}))[t.key]=t),p&&p(n),_&&(jo(n,u),jo(n,f),Po(function(){Uo(n,u),k.cancelled||(jo(n,l),y||(Vo(E)?setTimeout(k,E):Fo(n,s,k)))})),d&&d(n,k),_||y||k())}}function Vo(t){return"number"==typeof t&&!isNaN(t)}function Wo(t){if(o(t))return!1;var e=t.fns;return i(e)?Wo(Array.isArray(e)?e[0]:e):(t._length||t.length)>1}function Yo(t,e){!0!==e.data.show&&Ho(e)}var Ko=function(t){var e,n,r={},c=t.modules,u=t.nodeOps;for(e=0;e<cr.length;++e)for(r[cr[e]]=[],n=0;n<c.length;++n)i(c[n][cr[e]])&&r[cr[e]].push(c[n][cr[e]]);function l(t){var e=u.parentNode(t);i(e)&&u.removeChild(e,t)}function f(t,e,n,o,s,c,l){if(i(t.elm)&&i(c)&&(t=c[l]=Et(t)),t.isRootInsert=!s,!function(t,e,n,o){var s=t.data;if(i(s)){var c=i(t.componentInstance)&&s.keepAlive;if(i(s=s.hook)&&i(s=s.init)&&s(t,!1),i(t.componentInstance))return p(t,e),d(n,t.elm,o),a(c)&&function(t,e,n,o){for(var a,s=t;s.componentInstance;)if(s=s.componentInstance._vnode,i(a=s.data)&&i(a=a.transition)){for(a=0;a<r.activate.length;++a)r.activate[a](sr,s);e.push(s);break}d(n,t.elm,o)}(t,e,n,o),!0}}(t,e,n,o)){var f=t.data,m=t.children,g=t.tag;i(g)?(t.elm=t.ns?u.createElementNS(t.ns,g):u.createElement(g,t),b(t),h(t,m,e),i(f)&&v(t,e),d(n,t.elm,o)):a(t.isComment)?(t.elm=u.createComment(t.text),d(n,t.elm,o)):(t.elm=u.createTextNode(t.text),d(n,t.elm,o))}}function p(t,e){i(t.data.pendingInsert)&&(e.push.apply(e,t.data.pendingInsert),t.data.pendingInsert=null),t.elm=t.componentInstance.$el,m(t)?(v(t,e),b(t)):(ar(t),e.push(t))}function d(t,e,n){i(t)&&(i(n)?u.parentNode(n)===t&&u.insertBefore(t,e,n):u.appendChild(t,e))}function h(t,e,n){if(Array.isArray(e))for(var r=0;r<e.length;++r)f(e[r],n,t.elm,null,!0,e,r);else s(t.text)&&u.appendChild(t.elm,u.createTextNode(String(t.text)))}function m(t){for(;t.componentInstance;)t=t.componentInstance._vnode;return i(t.tag)}function v(t,n){for(var o=0;o<r.create.length;++o)r.create[o](sr,t);i(e=t.data.hook)&&(i(e.create)&&e.create(sr,t),i(e.insert)&&n.push(t))}function b(t){var e;if(i(e=t.fnScopeId))u.setStyleScope(t.elm,e);else for(var n=t;n;)i(e=n.context)&&i(e=e.$options._scopeId)&&u.setStyleScope(t.elm,e),n=n.parent;i(e=Qe)&&e!==t.context&&e!==t.fnContext&&i(e=e.$options._scopeId)&&u.setStyleScope(t.elm,e)}function _(t,e,n,r,o,i){for(;r<=o;++r)f(n[r],i,t,e,!1,n,r)}function y(t){var e,n,o=t.data;if(i(o))for(i(e=o.hook)&&i(e=e.destroy)&&e(t),e=0;e<r.destroy.length;++e)r.destroy[e](t);if(i(e=t.children))for(n=0;n<t.children.length;++n)y(t.children[n])}function E(t,e,n,r){for(;n<=r;++n){var o=e[n];i(o)&&(i(o.tag)?(k(o),y(o)):l(o.elm))}}function k(t,e){if(i(e)||i(t.data)){var n,o=r.remove.length+1;for(i(e)?e.listeners+=o:e=function(t,e){function n(){0==--n.listeners&&l(t)}return n.listeners=e,n}(t.elm,o),i(n=t.componentInstance)&&i(n=n._vnode)&&i(n.data)&&k(n,e),n=0;n<r.remove.length;++n)r.remove[n](t,e);i(n=t.data.hook)&&i(n=n.remove)?n(t,e):e()}else l(t.elm)}function x(t,e,n,r){for(var o=n;o<r;o++){var a=e[o];if(i(a)&&ur(t,a))return o}}function w(t,e,n,s,c,l){if(t!==e){i(e.elm)&&i(s)&&(e=s[c]=Et(e));var p=e.elm=t.elm;if(a(t.isAsyncPlaceholder))i(e.asyncFactory.resolved)?T(t.elm,e,n):e.isAsyncPlaceholder=!0;else if(a(e.isStatic)&&a(t.isStatic)&&e.key===t.key&&(a(e.isCloned)||a(e.isOnce)))e.componentInstance=t.componentInstance;else{var d,h=e.data;i(h)&&i(d=h.hook)&&i(d=d.prepatch)&&d(t,e);var g=t.children,v=e.children;if(i(h)&&m(e)){for(d=0;d<r.update.length;++d)r.update[d](t,e);i(d=h.hook)&&i(d=d.update)&&d(t,e)}o(e.text)?i(g)&&i(v)?g!==v&&function(t,e,n,r,a){for(var s,c,l,p=0,d=0,h=e.length-1,m=e[0],g=e[h],v=n.length-1,b=n[0],y=n[v],k=!a;p<=h&&d<=v;)o(m)?m=e[++p]:o(g)?g=e[--h]:ur(m,b)?(w(m,b,r,n,d),m=e[++p],b=n[++d]):ur(g,y)?(w(g,y,r,n,v),g=e[--h],y=n[--v]):ur(m,y)?(w(m,y,r,n,v),k&&u.insertBefore(t,m.elm,u.nextSibling(g.elm)),m=e[++p],y=n[--v]):ur(g,b)?(w(g,b,r,n,d),k&&u.insertBefore(t,g.elm,m.elm),g=e[--h],b=n[++d]):(o(s)&&(s=lr(e,p,h)),o(c=i(b.key)?s[b.key]:x(b,e,p,h))?f(b,r,t,m.elm,!1,n,d):ur(l=e[c],b)?(w(l,b,r,n,d),e[c]=void 0,k&&u.insertBefore(t,l.elm,m.elm)):f(b,r,t,m.elm,!1,n,d),b=n[++d]);p>h?_(t,o(n[v+1])?null:n[v+1].elm,n,d,v,r):d>v&&E(0,e,p,h)}(p,g,v,n,l):i(v)?(i(t.text)&&u.setTextContent(p,""),_(p,null,v,0,v.length-1,n)):i(g)?E(0,g,0,g.length-1):i(t.text)&&u.setTextContent(p,""):t.text!==e.text&&u.setTextContent(p,e.text),i(h)&&i(d=h.hook)&&i(d=d.postpatch)&&d(t,e)}}}function C(t,e,n){if(a(n)&&i(t.parent))t.parent.data.pendingInsert=e;else for(var r=0;r<e.length;++r)e[r].data.hook.insert(e[r])}var A=g("attrs,class,staticClass,staticStyle,key");function T(t,e,n,r){var o,s=e.tag,c=e.data,u=e.children;if(r=r||c&&c.pre,e.elm=t,a(e.isComment)&&i(e.asyncFactory))return e.isAsyncPlaceholder=!0,!0;if(i(c)&&(i(o=c.hook)&&i(o=o.init)&&o(e,!0),i(o=e.componentInstance)))return p(e,n),!0;if(i(s)){if(i(u))if(t.hasChildNodes())if(i(o=c)&&i(o=o.domProps)&&i(o=o.innerHTML)){if(o!==t.innerHTML)return!1}else{for(var l=!0,f=t.firstChild,d=0;d<u.length;d++){if(!f||!T(f,u[d],n,r)){l=!1;break}f=f.nextSibling}if(!l||f)return!1}else h(e,u,n);if(i(c)){var m=!1;for(var g in c)if(!A(g)){m=!0,v(e,n);break}!m&&c.class&&ie(c.class)}}else t.data!==e.text&&(t.data=e.text);return!0}return function(t,e,n,s){if(!o(e)){var c,l=!1,p=[];if(o(t))l=!0,f(e,p);else{var d=i(t.nodeType);if(!d&&ur(t,e))w(t,e,p,null,null,s);else{if(d){if(1===t.nodeType&&t.hasAttribute(U)&&(t.removeAttribute(U),n=!0),a(n)&&T(t,e,p))return C(e,p,!0),t;c=t,t=new vt(u.tagName(c).toLowerCase(),{},[],void 0,c)}var h=t.elm,g=u.parentNode(h);if(f(e,p,h._leaveCb?null:g,u.nextSibling(h)),i(e.parent))for(var v=e.parent,b=m(e);v;){for(var _=0;_<r.destroy.length;++_)r.destroy[_](v);if(v.elm=e.elm,b){for(var k=0;k<r.create.length;++k)r.create[k](sr,v);var x=v.data.hook.insert;if(x.merged)for(var A=1;A<x.fns.length;A++)x.fns[A]()}else ar(v);v=v.parent}i(g)?E(0,[t],0,0):i(t.tag)&&y(t)}}return C(e,p,l),e.elm}i(t)&&y(t)}}({nodeOps:or,modules:[Er,Rr,so,lo,ko,Y?{create:Yo,activate:Yo,remove:function(t,e){!0!==t.data.show?Go(t,e):e()}}:{}].concat(vr)});Q&&document.addEventListener("selectionchange",function(){var t=document.activeElement;t&&t.vmodel&&ri(t,"input")});var Xo={inserted:function(t,e,n,r){"select"===n.tag?(r.elm&&!r.elm._vOptions?ue(n,"postpatch",function(){Xo.componentUpdated(t,e,n)}):Zo(t,e,n.context),t._vOptions=[].map.call(t.options,ti)):("textarea"===n.tag||nr(t.type))&&(t._vModifiers=e.modifiers,e.modifiers.lazy||(t.addEventListener("compositionstart",ei),t.addEventListener("compositionend",ni),t.addEventListener("change",ni),Q&&(t.vmodel=!0)))},componentUpdated:function(t,e,n){if("select"===n.tag){Zo(t,e,n.context);var r=t._vOptions,o=t._vOptions=[].map.call(t.options,ti);if(o.some(function(t,e){return!M(t,r[e])}))(t.multiple?e.value.some(function(t){return Qo(t,o)}):e.value!==e.oldValue&&Qo(e.value,o))&&ri(t,"change")}}};function Zo(t,e,n){Jo(t,e,n),(J||tt)&&setTimeout(function(){Jo(t,e,n)},0)}function Jo(t,e,n){var r=e.value,o=t.multiple;if(!o||Array.isArray(r)){for(var i,a,s=0,c=t.options.length;s<c;s++)if(a=t.options[s],o)i=P(r,ti(a))>-1,a.selected!==i&&(a.selected=i);else if(M(ti(a),r))return void(t.selectedIndex!==s&&(t.selectedIndex=s));o||(t.selectedIndex=-1)}}function Qo(t,e){return e.every(function(e){return!M(e,t)})}function ti(t){return"_value"in t?t._value:t.value}function ei(t){t.target.composing=!0}function ni(t){t.target.composing&&(t.target.composing=!1,ri(t.target,"input"))}function ri(t,e){var n=document.createEvent("HTMLEvents");n.initEvent(e,!0,!0),t.dispatchEvent(n)}function oi(t){return!t.componentInstance||t.data&&t.data.transition?t:oi(t.componentInstance._vnode)}var ii={model:Xo,show:{bind:function(t,e,n){var r=e.value,o=(n=oi(n)).data&&n.data.transition,i=t.__vOriginalDisplay="none"===t.style.display?"":t.style.display;r&&o?(n.data.show=!0,Ho(n,function(){t.style.display=i})):t.style.display=r?i:"none"},update:function(t,e,n){var r=e.value;!r!=!e.oldValue&&((n=oi(n)).data&&n.data.transition?(n.data.show=!0,r?Ho(n,function(){t.style.display=t.__vOriginalDisplay}):Go(n,function(){t.style.display="none"})):t.style.display=r?t.__vOriginalDisplay:"none")},unbind:function(t,e,n,r,o){o||(t.style.display=t.__vOriginalDisplay)}}},ai={name:String,appear:Boolean,css:Boolean,mode:String,type:String,enterClass:String,leaveClass:String,enterToClass:String,leaveToClass:String,enterActiveClass:String,leaveActiveClass:String,appearClass:String,appearActiveClass:String,appearToClass:String,duration:[Number,String,Object]};function si(t){var e=t&&t.componentOptions;return e&&e.Ctor.options.abstract?si(Ye(e.children)):t}function ci(t){var e={},n=t.$options;for(var r in n.propsData)e[r]=t[r];var o=n._parentListeners;for(var i in o)e[w(i)]=o[i];return e}function ui(t,e){if(/\d-keep-alive$/.test(e.tag))return t("keep-alive",{props:e.componentOptions.propsData})}var li=function(t){return t.tag||We(t)},fi=function(t){return"show"===t.name},pi={name:"transition",props:ai,abstract:!0,render:function(t){var e=this,n=this.$slots.default;if(n&&(n=n.filter(li)).length){0;var r=this.mode;0;var o=n[0];if(function(t){for(;t=t.parent;)if(t.data.transition)return!0}(this.$vnode))return o;var i=si(o);if(!i)return o;if(this._leaving)return ui(t,o);var a="__transition-"+this._uid+"-";i.key=null==i.key?i.isComment?a+"comment":a+i.tag:s(i.key)?0===String(i.key).indexOf(a)?i.key:a+i.key:i.key;var c=(i.data||(i.data={})).transition=ci(this),u=this._vnode,l=si(u);if(i.data.directives&&i.data.directives.some(fi)&&(i.data.show=!0),l&&l.data&&!function(t,e){return e.key===t.key&&e.tag===t.tag}(i,l)&&!We(l)&&(!l.componentInstance||!l.componentInstance._vnode.isComment)){var f=l.data.transition=O({},c);if("out-in"===r)return this._leaving=!0,ue(f,"afterLeave",function(){e._leaving=!1,e.$forceUpdate()}),ui(t,o);if("in-out"===r){if(We(i))return u;var p,d=function(){p()};ue(c,"afterEnter",d),ue(c,"enterCancelled",d),ue(f,"delayLeave",function(t){p=t})}}return o}}},di=O({tag:String,moveClass:String},ai);function hi(t){t.elm._moveCb&&t.elm._moveCb(),t.elm._enterCb&&t.elm._enterCb()}function mi(t){t.data.newPos=t.elm.getBoundingClientRect()}function gi(t){var e=t.data.pos,n=t.data.newPos,r=e.left-n.left,o=e.top-n.top;if(r||o){t.data.moved=!0;var i=t.elm.style;i.transform=i.WebkitTransform="translate("+r+"px,"+o+"px)",i.transitionDuration="0s"}}delete di.mode;var vi={Transition:pi,TransitionGroup:{props:di,beforeMount:function(){var t=this,e=this._update;this._update=function(n,r){var o=tn(t);t.__patch__(t._vnode,t.kept,!1,!0),t._vnode=t.kept,o(),e.call(t,n,r)}},render:function(t){for(var e=this.tag||this.$vnode.data.tag||"span",n=Object.create(null),r=this.prevChildren=this.children,o=this.$slots.default||[],i=this.children=[],a=ci(this),s=0;s<o.length;s++){var c=o[s];if(c.tag)if(null!=c.key&&0!==String(c.key).indexOf("__vlist"))i.push(c),n[c.key]=c,(c.data||(c.data={})).transition=a;else;}if(r){for(var u=[],l=[],f=0;f<r.length;f++){var p=r[f];p.data.transition=a,p.data.pos=p.elm.getBoundingClientRect(),n[p.key]?u.push(p):l.push(p)}this.kept=t(e,null,u),this.removed=l}return t(e,null,i)},updated:function(){var t=this.prevChildren,e=this.moveClass||(this.name||"v")+"-move";t.length&&this.hasMove(t[0].elm,e)&&(t.forEach(hi),t.forEach(mi),t.forEach(gi),this._reflow=document.body.offsetHeight,t.forEach(function(t){if(t.data.moved){var n=t.elm,r=n.style;jo(n,e),r.transform=r.WebkitTransform=r.transitionDuration="",n.addEventListener(Lo,n._moveCb=function t(r){r&&r.target!==n||r&&!/transform$/.test(r.propertyName)||(n.removeEventListener(Lo,t),n._moveCb=null,Uo(n,e))})}}))},methods:{hasMove:function(t,e){if(!So)return!1;if(this._hasMove)return this._hasMove;var n=t.cloneNode();t._transitionClasses&&t._transitionClasses.forEach(function(t){Co(n,t)}),wo(n,e),n.style.display="none",this.$el.appendChild(n);var r=Bo(n);return this.$el.removeChild(n),this._hasMove=r.hasTransform}}}};Tn.config.mustUseProp=jn,Tn.config.isReservedTag=Qn,Tn.config.isReservedAttr=Mn,Tn.config.getTagNamespace=tr,Tn.config.isUnknownElement=function(t){if(!Y)return!0;if(Qn(t))return!1;if(t=t.toLowerCase(),null!=er[t])return er[t];var e=document.createElement(t);return t.indexOf("-")>-1?er[t]=e.constructor===window.HTMLUnknownElement||e.constructor===window.HTMLElement:er[t]=/HTMLUnknownElement/.test(e.toString())},O(Tn.options.directives,ii),O(Tn.options.components,vi),Tn.prototype.__patch__=Y?Ko:L,Tn.prototype.$mount=function(t,e){return function(t,e,n){var r;return t.$el=e,t.$options.render||(t.$options.render=_t),rn(t,"beforeMount"),r=function(){t._update(t._render(),n)},new gn(t,r,L,{before:function(){t._isMounted&&!t._isDestroyed&&rn(t,"beforeUpdate")}},!0),n=!1,null==t.$vnode&&(t._isMounted=!0,rn(t,"mounted")),t}(this,t=t&&Y?rr(t):void 0,e)},Y&&setTimeout(function(){B.devtools&&st&&st.emit("init",Tn)},0);var bi=/\{\{((?:.|\r?\n)+?)\}\}/g,_i=/[-.*+?^${}()|[\]\/\\]/g,yi=k(function(t){var e=t[0].replace(_i,"\\$&"),n=t[1].replace(_i,"\\$&");return new RegExp(e+"((?:.|\\n)+?)"+n,"g")});var Ei={staticKeys:["staticClass"],transformNode:function(t,e){e.warn;var n=zr(t,"class");n&&(t.staticClass=JSON.stringify(n));var r=Br(t,"class",!1);r&&(t.classBinding=r)},genData:function(t){var e="";return t.staticClass&&(e+="staticClass:"+t.staticClass+","),t.classBinding&&(e+="class:"+t.classBinding+","),e}};var ki,xi={staticKeys:["staticStyle"],transformNode:function(t,e){e.warn;var n=zr(t,"style");n&&(t.staticStyle=JSON.stringify(fo(n)));var r=Br(t,"style",!1);r&&(t.styleBinding=r)},genData:function(t){var e="";return t.staticStyle&&(e+="staticStyle:"+t.staticStyle+","),t.styleBinding&&(e+="style:("+t.styleBinding+"),"),e}},wi=function(t){return(ki=ki||document.createElement("div")).innerHTML=t,ki.textContent},Ci=g("area,base,br,col,embed,frame,hr,img,input,isindex,keygen,link,meta,param,source,track,wbr"),Ai=g("colgroup,dd,dt,li,options,p,td,tfoot,th,thead,tr,source"),Ti=g("address,article,aside,base,blockquote,body,caption,col,colgroup,dd,details,dialog,div,dl,dt,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,head,header,hgroup,hr,html,legend,li,menuitem,meta,optgroup,option,param,rp,rt,source,style,summary,tbody,td,tfoot,th,thead,title,tr,track"),Si=/^\s*([^\s"'<>\/=]+)(?:\s*(=)\s*(?:"([^"]*)"+|'([^']*)'+|([^\s"'=<>`]+)))?/,Ri=/^\s*((?:v-[\w-]+:|@|:|#)\[[^=]+\][^\s"'<>\/=]*)(?:\s*(=)\s*(?:"([^"]*)"+|'([^']*)'+|([^\s"'=<>`]+)))?/,Oi="[a-zA-Z_][\\-\\.0-9_a-zA-Z"+z.source+"]*",Ni="((?:"+Oi+"\\:)?"+Oi+")",Li=new RegExp("^<"+Ni),Ii=/^\s*(\/?)>/,Di=new RegExp("^<\\/"+Ni+"[^>]*>"),Mi=/^<!DOCTYPE [^>]+>/i,Pi=/^<!\--/,ji=/^<!\[/,Ui=g("script,style,textarea",!0),Fi={},$i={"<":"<",">":">",""":'"',"&":"&"," ":"\n","	":"\t","'":"'"},Bi=/&(?:lt|gt|quot|amp|#39);/g,zi=/&(?:lt|gt|quot|amp|#39|#10|#9);/g,qi=g("pre,textarea",!0),Hi=function(t,e){return t&&qi(t)&&"\n"===e[0]};function Gi(t,e){var n=e?zi:Bi;return t.replace(n,function(t){return $i[t]})}var Vi,Wi,Yi,Ki,Xi,Zi,Ji,Qi,ta=/^@|^v-on:/,ea=/^v-|^@|^:/,na=/([\s\S]*?)\s+(?:in|of)\s+([\s\S]*)/,ra=/,([^,\}\]]*)(?:,([^,\}\]]*))?$/,oa=/^\(|\)$/g,ia=/^\[.*\]$/,aa=/:(.*)$/,sa=/^:|^\.|^v-bind:/,ca=/\.[^.\]]+(?=[^\]]*$)/g,ua=/^v-slot(:|$)|^#/,la=/[\r\n]/,fa=/\s+/g,pa=k(wi),da="_empty_";function ha(t,e,n){return{type:1,tag:t,attrsList:e,attrsMap:Ea(e),rawAttrsMap:{},parent:n,children:[]}}function ma(t,e){Vi=e.warn||Ir,Zi=e.isPreTag||I,Ji=e.mustUseProp||I,Qi=e.getTagNamespace||I;var n=e.isReservedTag||I;(function(t){return!!t.component||!n(t.tag)}),Yi=Dr(e.modules,"transformNode"),Ki=Dr(e.modules,"preTransformNode"),Xi=Dr(e.modules,"postTransformNode"),Wi=e.delimiters;var r,o,i=[],a=!1!==e.preserveWhitespace,s=e.whitespace,c=!1,u=!1;function l(t){if(f(t),c||t.processed||(t=ga(t,e)),i.length||t===r||r.if&&(t.elseif||t.else)&&ba(r,{exp:t.elseif,block:t}),o&&!t.forbidden)if(t.elseif||t.else)a=t,(s=function(t){var e=t.length;for(;e--;){if(1===t[e].type)return t[e];t.pop()}}(o.children))&&s.if&&ba(s,{exp:a.elseif,block:a});else{if(t.slotScope){var n=t.slotTarget||'"default"';(o.scopedSlots||(o.scopedSlots={}))[n]=t}o.children.push(t),t.parent=o}var a,s;t.children=t.children.filter(function(t){return!t.slotScope}),f(t),t.pre&&(c=!1),Zi(t.tag)&&(u=!1);for(var l=0;l<Xi.length;l++)Xi[l](t,e)}function f(t){if(!u)for(var e;(e=t.children[t.children.length-1])&&3===e.type&&" "===e.text;)t.children.pop()}return function(t,e){for(var n,r,o=[],i=e.expectHTML,a=e.isUnaryTag||I,s=e.canBeLeftOpenTag||I,c=0;t;){if(n=t,r&&Ui(r)){var u=0,l=r.toLowerCase(),f=Fi[l]||(Fi[l]=new RegExp("([\\s\\S]*?)(</"+l+"[^>]*>)","i")),p=t.replace(f,function(t,n,r){return u=r.length,Ui(l)||"noscript"===l||(n=n.replace(/<!\--([\s\S]*?)-->/g,"$1").replace(/<!\[CDATA\[([\s\S]*?)]]>/g,"$1")),Hi(l,n)&&(n=n.slice(1)),e.chars&&e.chars(n),""});c+=t.length-p.length,t=p,A(l,c-u,c)}else{var d=t.indexOf("<");if(0===d){if(Pi.test(t)){var h=t.indexOf("--\x3e");if(h>=0){e.shouldKeepComment&&e.comment(t.substring(4,h),c,c+h+3),x(h+3);continue}}if(ji.test(t)){var m=t.indexOf("]>");if(m>=0){x(m+2);continue}}var g=t.match(Mi);if(g){x(g[0].length);continue}var v=t.match(Di);if(v){var b=c;x(v[0].length),A(v[1],b,c);continue}var _=w();if(_){C(_),Hi(_.tagName,t)&&x(1);continue}}var y=void 0,E=void 0,k=void 0;if(d>=0){for(E=t.slice(d);!(Di.test(E)||Li.test(E)||Pi.test(E)||ji.test(E)||(k=E.indexOf("<",1))<0);)d+=k,E=t.slice(d);y=t.substring(0,d)}d<0&&(y=t),y&&x(y.length),e.chars&&y&&e.chars(y,c-y.length,c)}if(t===n){e.chars&&e.chars(t);break}}function x(e){c+=e,t=t.substring(e)}function w(){var e=t.match(Li);if(e){var n,r,o={tagName:e[1],attrs:[],start:c};for(x(e[0].length);!(n=t.match(Ii))&&(r=t.match(Ri)||t.match(Si));)r.start=c,x(r[0].length),r.end=c,o.attrs.push(r);if(n)return o.unarySlash=n[1],x(n[0].length),o.end=c,o}}function C(t){var n=t.tagName,c=t.unarySlash;i&&("p"===r&&Ti(n)&&A(r),s(n)&&r===n&&A(n));for(var u=a(n)||!!c,l=t.attrs.length,f=new Array(l),p=0;p<l;p++){var d=t.attrs[p],h=d[3]||d[4]||d[5]||"",m="a"===n&&"href"===d[1]?e.shouldDecodeNewlinesForHref:e.shouldDecodeNewlines;f[p]={name:d[1],value:Gi(h,m)}}u||(o.push({tag:n,lowerCasedTag:n.toLowerCase(),attrs:f,start:t.start,end:t.end}),r=n),e.start&&e.start(n,f,u,t.start,t.end)}function A(t,n,i){var a,s;if(null==n&&(n=c),null==i&&(i=c),t)for(s=t.toLowerCase(),a=o.length-1;a>=0&&o[a].lowerCasedTag!==s;a--);else a=0;if(a>=0){for(var u=o.length-1;u>=a;u--)e.end&&e.end(o[u].tag,n,i);o.length=a,r=a&&o[a-1].tag}else"br"===s?e.start&&e.start(t,[],!0,n,i):"p"===s&&(e.start&&e.start(t,[],!1,n,i),e.end&&e.end(t,n,i))}A()}(t,{warn:Vi,expectHTML:e.expectHTML,isUnaryTag:e.isUnaryTag,canBeLeftOpenTag:e.canBeLeftOpenTag,shouldDecodeNewlines:e.shouldDecodeNewlines,shouldDecodeNewlinesForHref:e.shouldDecodeNewlinesForHref,shouldKeepComment:e.comments,outputSourceRange:e.outputSourceRange,start:function(t,n,a,s,f){var p=o&&o.ns||Qi(t);J&&"svg"===p&&(n=function(t){for(var e=[],n=0;n<t.length;n++){var r=t[n];ka.test(r.name)||(r.name=r.name.replace(xa,""),e.push(r))}return e}(n));var d,h=ha(t,n,o);p&&(h.ns=p),"style"!==(d=h).tag&&("script"!==d.tag||d.attrsMap.type&&"text/javascript"!==d.attrsMap.type)||at()||(h.forbidden=!0);for(var m=0;m<Ki.length;m++)h=Ki[m](h,e)||h;c||(!function(t){null!=zr(t,"v-pre")&&(t.pre=!0)}(h),h.pre&&(c=!0)),Zi(h.tag)&&(u=!0),c?function(t){var e=t.attrsList,n=e.length;if(n)for(var r=t.attrs=new Array(n),o=0;o<n;o++)r[o]={name:e[o].name,value:JSON.stringify(e[o].value)},null!=e[o].start&&(r[o].start=e[o].start,r[o].end=e[o].end);else t.pre||(t.plain=!0)}(h):h.processed||(va(h),function(t){var e=zr(t,"v-if");if(e)t.if=e,ba(t,{exp:e,block:t});else{null!=zr(t,"v-else")&&(t.else=!0);var n=zr(t,"v-else-if");n&&(t.elseif=n)}}(h),function(t){null!=zr(t,"v-once")&&(t.once=!0)}(h)),r||(r=h),a?l(h):(o=h,i.push(h))},end:function(t,e,n){var r=i[i.length-1];i.length-=1,o=i[i.length-1],l(r)},chars:function(t,e,n){if(o&&(!J||"textarea"!==o.tag||o.attrsMap.placeholder!==t)){var r,i,l,f=o.children;if(t=u||t.trim()?"script"===(r=o).tag||"style"===r.tag?t:pa(t):f.length?s?"condense"===s&&la.test(t)?"":" ":a?" ":"":"")u||"condense"!==s||(t=t.replace(fa," ")),!c&&" "!==t&&(i=function(t,e){var n=e?yi(e):bi;if(n.test(t)){for(var r,o,i,a=[],s=[],c=n.lastIndex=0;r=n.exec(t);){(o=r.index)>c&&(s.push(i=t.slice(c,o)),a.push(JSON.stringify(i)));var u=Nr(r[1].trim());a.push("_s("+u+")"),s.push({"@binding":u}),c=o+r[0].length}return c<t.length&&(s.push(i=t.slice(c)),a.push(JSON.stringify(i))),{expression:a.join("+"),tokens:s}}}(t,Wi))?l={type:2,expression:i.expression,tokens:i.tokens,text:t}:" "===t&&f.length&&" "===f[f.length-1].text||(l={type:3,text:t}),l&&f.push(l)}},comment:function(t,e,n){if(o){var r={type:3,text:t,isComment:!0};0,o.children.push(r)}}}),r}function ga(t,e){var n;!function(t){var e=Br(t,"key");if(e){t.key=e}}(t),t.plain=!t.key&&!t.scopedSlots&&!t.attrsList.length,function(t){var e=Br(t,"ref");e&&(t.ref=e,t.refInFor=function(t){var e=t;for(;e;){if(void 0!==e.for)return!0;e=e.parent}return!1}(t))}(t),function(t){var e;"template"===t.tag?(e=zr(t,"scope"),t.slotScope=e||zr(t,"slot-scope")):(e=zr(t,"slot-scope"))&&(t.slotScope=e);var n=Br(t,"slot");n&&(t.slotTarget='""'===n?'"default"':n,t.slotTargetDynamic=!(!t.attrsMap[":slot"]&&!t.attrsMap["v-bind:slot"]),"template"===t.tag||t.slotScope||Pr(t,"slot",n,function(t,e){return t.rawAttrsMap[":"+e]||t.rawAttrsMap["v-bind:"+e]||t.rawAttrsMap[e]}(t,"slot")));if("template"===t.tag){var r=qr(t,ua);if(r){0;var o=_a(r),i=o.name,a=o.dynamic;t.slotTarget=i,t.slotTargetDynamic=a,t.slotScope=r.value||da}}else{var s=qr(t,ua);if(s){0;var c=t.scopedSlots||(t.scopedSlots={}),u=_a(s),l=u.name,f=u.dynamic,p=c[l]=ha("template",[],t);p.slotTarget=l,p.slotTargetDynamic=f,p.children=t.children.filter(function(t){if(!t.slotScope)return t.parent=p,!0}),p.slotScope=s.value||da,t.children=[],t.plain=!1}}}(t),"slot"===(n=t).tag&&(n.slotName=Br(n,"name")),function(t){var e;(e=Br(t,"is"))&&(t.component=e);null!=zr(t,"inline-template")&&(t.inlineTemplate=!0)}(t);for(var r=0;r<Yi.length;r++)t=Yi[r](t,e)||t;return function(t){var e,n,r,o,i,a,s,c,u=t.attrsList;for(e=0,n=u.length;e<n;e++){if(r=o=u[e].name,i=u[e].value,ea.test(r))if(t.hasBindings=!0,(a=ya(r.replace(ea,"")))&&(r=r.replace(ca,"")),sa.test(r))r=r.replace(sa,""),i=Nr(i),(c=ia.test(r))&&(r=r.slice(1,-1)),a&&(a.prop&&!c&&"innerHtml"===(r=w(r))&&(r="innerHTML"),a.camel&&!c&&(r=w(r)),a.sync&&(s=Vr(i,"$event"),c?$r(t,'"update:"+('+r+")",s,null,!1,0,u[e],!0):($r(t,"update:"+w(r),s,null,!1,0,u[e]),T(r)!==w(r)&&$r(t,"update:"+T(r),s,null,!1,0,u[e])))),a&&a.prop||!t.component&&Ji(t.tag,t.attrsMap.type,r)?Mr(t,r,i,u[e],c):Pr(t,r,i,u[e],c);else if(ta.test(r))r=r.replace(ta,""),(c=ia.test(r))&&(r=r.slice(1,-1)),$r(t,r,i,a,!1,0,u[e],c);else{var l=(r=r.replace(ea,"")).match(aa),f=l&&l[1];c=!1,f&&(r=r.slice(0,-(f.length+1)),ia.test(f)&&(f=f.slice(1,-1),c=!0)),Ur(t,r,o,i,f,c,a,u[e])}else Pr(t,r,JSON.stringify(i),u[e]),!t.component&&"muted"===r&&Ji(t.tag,t.attrsMap.type,r)&&Mr(t,r,"true",u[e])}}(t),t}function va(t){var e;if(e=zr(t,"v-for")){var n=function(t){var e=t.match(na);if(!e)return;var n={};n.for=e[2].trim();var r=e[1].trim().replace(oa,""),o=r.match(ra);o?(n.alias=r.replace(ra,"").trim(),n.iterator1=o[1].trim(),o[2]&&(n.iterator2=o[2].trim())):n.alias=r;return n}(e);n&&O(t,n)}}function ba(t,e){t.ifConditions||(t.ifConditions=[]),t.ifConditions.push(e)}function _a(t){var e=t.name.replace(ua,"");return e||"#"!==t.name[0]&&(e="default"),ia.test(e)?{name:e.slice(1,-1),dynamic:!0}:{name:'"'+e+'"',dynamic:!1}}function ya(t){var e=t.match(ca);if(e){var n={};return e.forEach(function(t){n[t.slice(1)]=!0}),n}}function Ea(t){for(var e={},n=0,r=t.length;n<r;n++)e[t[n].name]=t[n].value;return e}var ka=/^xmlns:NS\d+/,xa=/^NS\d+:/;function wa(t){return ha(t.tag,t.attrsList.slice(),t.parent)}var Ca=[Ei,xi,{preTransformNode:function(t,e){if("input"===t.tag){var n,r=t.attrsMap;if(!r["v-model"])return;if((r[":type"]||r["v-bind:type"])&&(n=Br(t,"type")),r.type||n||!r["v-bind"]||(n="("+r["v-bind"]+").type"),n){var o=zr(t,"v-if",!0),i=o?"&&("+o+")":"",a=null!=zr(t,"v-else",!0),s=zr(t,"v-else-if",!0),c=wa(t);va(c),jr(c,"type","checkbox"),ga(c,e),c.processed=!0,c.if="("+n+")==='checkbox'"+i,ba(c,{exp:c.if,block:c});var u=wa(t);zr(u,"v-for",!0),jr(u,"type","radio"),ga(u,e),ba(c,{exp:"("+n+")==='radio'"+i,block:u});var l=wa(t);return zr(l,"v-for",!0),jr(l,":type",n),ga(l,e),ba(c,{exp:o,block:l}),a?c.else=!0:s&&(c.elseif=s),c}}}}];var Aa,Ta,Sa={expectHTML:!0,modules:Ca,directives:{model:function(t,e,n){n;var r=e.value,o=e.modifiers,i=t.tag,a=t.attrsMap.type;if(t.component)return Gr(t,r,o),!1;if("select"===i)!function(t,e,n){var r='var $$selectedVal = Array.prototype.filter.call($event.target.options,function(o){return o.selected}).map(function(o){var val = "_value" in o ? o._value : o.value;return '+(n&&n.number?"_n(val)":"val")+"});";r=r+" "+Vr(e,"$event.target.multiple ? $$selectedVal : $$selectedVal[0]"),$r(t,"change",r,null,!0)}(t,r,o);else if("input"===i&&"checkbox"===a)!function(t,e,n){var r=n&&n.number,o=Br(t,"value")||"null",i=Br(t,"true-value")||"true",a=Br(t,"false-value")||"false";Mr(t,"checked","Array.isArray("+e+")?_i("+e+","+o+")>-1"+("true"===i?":("+e+")":":_q("+e+","+i+")")),$r(t,"change","var $$a="+e+",$$el=$event.target,$$c=$$el.checked?("+i+"):("+a+");if(Array.isArray($$a)){var $$v="+(r?"_n("+o+")":o)+",$$i=_i($$a,$$v);if($$el.checked){$$i<0&&("+Vr(e,"$$a.concat([$$v])")+")}else{$$i>-1&&("+Vr(e,"$$a.slice(0,$$i).concat($$a.slice($$i+1))")+")}}else{"+Vr(e,"$$c")+"}",null,!0)}(t,r,o);else if("input"===i&&"radio"===a)!function(t,e,n){var r=n&&n.number,o=Br(t,"value")||"null";Mr(t,"checked","_q("+e+","+(o=r?"_n("+o+")":o)+")"),$r(t,"change",Vr(e,o),null,!0)}(t,r,o);else if("input"===i||"textarea"===i)!function(t,e,n){var r=t.attrsMap.type,o=n||{},i=o.lazy,a=o.number,s=o.trim,c=!i&&"range"!==r,u=i?"change":"range"===r?Qr:"input",l="$event.target.value";s&&(l="$event.target.value.trim()"),a&&(l="_n("+l+")");var f=Vr(e,l);c&&(f="if($event.target.composing)return;"+f),Mr(t,"value","("+e+")"),$r(t,u,f,null,!0),(s||a)&&$r(t,"blur","$forceUpdate()")}(t,r,o);else if(!B.isReservedTag(i))return Gr(t,r,o),!1;return!0},text:function(t,e){e.value&&Mr(t,"textContent","_s("+e.value+")",e)},html:function(t,e){e.value&&Mr(t,"innerHTML","_s("+e.value+")",e)}},isPreTag:function(t){return"pre"===t},isUnaryTag:Ci,mustUseProp:jn,canBeLeftOpenTag:Ai,isReservedTag:Qn,getTagNamespace:tr,staticKeys:function(t){return t.reduce(function(t,e){return t.concat(e.staticKeys||[])},[]).join(",")}(Ca)},Ra=k(function(t){return g("type,tag,attrsList,attrsMap,plain,parent,children,attrs,start,end,rawAttrsMap"+(t?","+t:""))});function Oa(t,e){t&&(Aa=Ra(e.staticKeys||""),Ta=e.isReservedTag||I,function t(e){e.static=function(t){if(2===t.type)return!1;if(3===t.type)return!0;return!(!t.pre&&(t.hasBindings||t.if||t.for||v(t.tag)||!Ta(t.tag)||function(t){for(;t.parent;){if("template"!==(t=t.parent).tag)return!1;if(t.for)return!0}return!1}(t)||!Object.keys(t).every(Aa)))}(e);if(1===e.type){if(!Ta(e.tag)&&"slot"!==e.tag&&null==e.attrsMap["inline-template"])return;for(var n=0,r=e.children.length;n<r;n++){var o=e.children[n];t(o),o.static||(e.static=!1)}if(e.ifConditions)for(var i=1,a=e.ifConditions.length;i<a;i++){var s=e.ifConditions[i].block;t(s),s.static||(e.static=!1)}}}(t),function t(e,n){if(1===e.type){if((e.static||e.once)&&(e.staticInFor=n),e.static&&e.children.length&&(1!==e.children.length||3!==e.children[0].type))return void(e.staticRoot=!0);if(e.staticRoot=!1,e.children)for(var r=0,o=e.children.length;r<o;r++)t(e.children[r],n||!!e.for);if(e.ifConditions)for(var i=1,a=e.ifConditions.length;i<a;i++)t(e.ifConditions[i].block,n)}}(t,!1))}var Na=/^([\w$_]+|\([^)]*?\))\s*=>|^function\s*(?:[\w$]+)?\s*\(/,La=/\([^)]*?\);*$/,Ia=/^[A-Za-z_$][\w$]*(?:\.[A-Za-z_$][\w$]*|\['[^']*?']|\["[^"]*?"]|\[\d+]|\[[A-Za-z_$][\w$]*])*$/,Da={esc:27,tab:9,enter:13,space:32,up:38,left:37,right:39,down:40,delete:[8,46]},Ma={esc:["Esc","Escape"],tab:"Tab",enter:"Enter",space:[" ","Spacebar"],up:["Up","ArrowUp"],left:["Left","ArrowLeft"],right:["Right","ArrowRight"],down:["Down","ArrowDown"],delete:["Backspace","Delete","Del"]},Pa=function(t){return"if("+t+")return null;"},ja={stop:"$event.stopPropagation();",prevent:"$event.preventDefault();",self:Pa("$event.target !== $event.currentTarget"),ctrl:Pa("!$event.ctrlKey"),shift:Pa("!$event.shiftKey"),alt:Pa("!$event.altKey"),meta:Pa("!$event.metaKey"),left:Pa("'button' in $event && $event.button !== 0"),middle:Pa("'button' in $event && $event.button !== 1"),right:Pa("'button' in $event && $event.button !== 2")};function Ua(t,e){var n=e?"nativeOn:":"on:",r="",o="";for(var i in t){var a=Fa(t[i]);t[i]&&t[i].dynamic?o+=i+","+a+",":r+='"'+i+'":'+a+","}return r="{"+r.slice(0,-1)+"}",o?n+"_d("+r+",["+o.slice(0,-1)+"])":n+r}function Fa(t){if(!t)return"function(){}";if(Array.isArray(t))return"["+t.map(function(t){return Fa(t)}).join(",")+"]";var e=Ia.test(t.value),n=Na.test(t.value),r=Ia.test(t.value.replace(La,""));if(t.modifiers){var o="",i="",a=[];for(var s in t.modifiers)if(ja[s])i+=ja[s],Da[s]&&a.push(s);else if("exact"===s){var c=t.modifiers;i+=Pa(["ctrl","shift","alt","meta"].filter(function(t){return!c[t]}).map(function(t){return"$event."+t+"Key"}).join("||"))}else a.push(s);return a.length&&(o+=function(t){return"if(!$event.type.indexOf('key')&&"+t.map($a).join("&&")+")return null;"}(a)),i&&(o+=i),"function($event){"+o+(e?"return "+t.value+"($event)":n?"return ("+t.value+")($event)":r?"return "+t.value:t.value)+"}"}return e||n?t.value:"function($event){"+(r?"return "+t.value:t.value)+"}"}function $a(t){var e=parseInt(t,10);if(e)return"$event.keyCode!=="+e;var n=Da[t],r=Ma[t];return"_k($event.keyCode,"+JSON.stringify(t)+","+JSON.stringify(n)+",$event.key,"+JSON.stringify(r)+")"}var Ba={on:function(t,e){t.wrapListeners=function(t){return"_g("+t+","+e.value+")"}},bind:function(t,e){t.wrapData=function(n){return"_b("+n+",'"+t.tag+"',"+e.value+","+(e.modifiers&&e.modifiers.prop?"true":"false")+(e.modifiers&&e.modifiers.sync?",true":"")+")"}},cloak:L},za=function(t){this.options=t,this.warn=t.warn||Ir,this.transforms=Dr(t.modules,"transformCode"),this.dataGenFns=Dr(t.modules,"genData"),this.directives=O(O({},Ba),t.directives);var e=t.isReservedTag||I;this.maybeComponent=function(t){return!!t.component||!e(t.tag)},this.onceId=0,this.staticRenderFns=[],this.pre=!1};function qa(t,e){var n=new za(e);return{render:"with(this){return "+(t?Ha(t,n):'_c("div")')+"}",staticRenderFns:n.staticRenderFns}}function Ha(t,e){if(t.parent&&(t.pre=t.pre||t.parent.pre),t.staticRoot&&!t.staticProcessed)return Ga(t,e);if(t.once&&!t.onceProcessed)return Va(t,e);if(t.for&&!t.forProcessed)return Ya(t,e);if(t.if&&!t.ifProcessed)return Wa(t,e);if("template"!==t.tag||t.slotTarget||e.pre){if("slot"===t.tag)return function(t,e){var n=t.slotName||'"default"',r=Ja(t,e),o="_t("+n+(r?","+r:""),i=t.attrs||t.dynamicAttrs?es((t.attrs||[]).concat(t.dynamicAttrs||[]).map(function(t){return{name:w(t.name),value:t.value,dynamic:t.dynamic}})):null,a=t.attrsMap["v-bind"];!i&&!a||r||(o+=",null");i&&(o+=","+i);a&&(o+=(i?"":",null")+","+a);return o+")"}(t,e);var n;if(t.component)n=function(t,e,n){var r=e.inlineTemplate?null:Ja(e,n,!0);return"_c("+t+","+Ka(e,n)+(r?","+r:"")+")"}(t.component,t,e);else{var r;(!t.plain||t.pre&&e.maybeComponent(t))&&(r=Ka(t,e));var o=t.inlineTemplate?null:Ja(t,e,!0);n="_c('"+t.tag+"'"+(r?","+r:"")+(o?","+o:"")+")"}for(var i=0;i<e.transforms.length;i++)n=e.transforms[i](t,n);return n}return Ja(t,e)||"void 0"}function Ga(t,e){t.staticProcessed=!0;var n=e.pre;return t.pre&&(e.pre=t.pre),e.staticRenderFns.push("with(this){return "+Ha(t,e)+"}"),e.pre=n,"_m("+(e.staticRenderFns.length-1)+(t.staticInFor?",true":"")+")"}function Va(t,e){if(t.onceProcessed=!0,t.if&&!t.ifProcessed)return Wa(t,e);if(t.staticInFor){for(var n="",r=t.parent;r;){if(r.for){n=r.key;break}r=r.parent}return n?"_o("+Ha(t,e)+","+e.onceId+++","+n+")":Ha(t,e)}return Ga(t,e)}function Wa(t,e,n,r){return t.ifProcessed=!0,function t(e,n,r,o){if(!e.length)return o||"_e()";var i=e.shift();return i.exp?"("+i.exp+")?"+a(i.block)+":"+t(e,n,r,o):""+a(i.block);function a(t){return r?r(t,n):t.once?Va(t,n):Ha(t,n)}}(t.ifConditions.slice(),e,n,r)}function Ya(t,e,n,r){var o=t.for,i=t.alias,a=t.iterator1?","+t.iterator1:"",s=t.iterator2?","+t.iterator2:"";return t.forProcessed=!0,(r||"_l")+"(("+o+"),function("+i+a+s+"){return "+(n||Ha)(t,e)+"})"}function Ka(t,e){var n="{",r=function(t,e){var n=t.directives;if(!n)return;var r,o,i,a,s="directives:[",c=!1;for(r=0,o=n.length;r<o;r++){i=n[r],a=!0;var u=e.directives[i.name];u&&(a=!!u(t,i,e.warn)),a&&(c=!0,s+='{name:"'+i.name+'",rawName:"'+i.rawName+'"'+(i.value?",value:("+i.value+"),expression:"+JSON.stringify(i.value):"")+(i.arg?",arg:"+(i.isDynamicArg?i.arg:'"'+i.arg+'"'):"")+(i.modifiers?",modifiers:"+JSON.stringify(i.modifiers):"")+"},")}if(c)return s.slice(0,-1)+"]"}(t,e);r&&(n+=r+","),t.key&&(n+="key:"+t.key+","),t.ref&&(n+="ref:"+t.ref+","),t.refInFor&&(n+="refInFor:true,"),t.pre&&(n+="pre:true,"),t.component&&(n+='tag:"'+t.tag+'",');for(var o=0;o<e.dataGenFns.length;o++)n+=e.dataGenFns[o](t);if(t.attrs&&(n+="attrs:"+es(t.attrs)+","),t.props&&(n+="domProps:"+es(t.props)+","),t.events&&(n+=Ua(t.events,!1)+","),t.nativeEvents&&(n+=Ua(t.nativeEvents,!0)+","),t.slotTarget&&!t.slotScope&&(n+="slot:"+t.slotTarget+","),t.scopedSlots&&(n+=function(t,e,n){var r=t.for||Object.keys(e).some(function(t){var n=e[t];return n.slotTargetDynamic||n.if||n.for||Xa(n)}),o=!!t.if;if(!r)for(var i=t.parent;i;){if(i.slotScope&&i.slotScope!==da||i.for){r=!0;break}i.if&&(o=!0),i=i.parent}var a=Object.keys(e).map(function(t){return Za(e[t],n)}).join(",");return"scopedSlots:_u(["+a+"]"+(r?",null,true":"")+(!r&&o?",null,false,"+function(t){var e=5381,n=t.length;for(;n;)e=33*e^t.charCodeAt(--n);return e>>>0}(a):"")+")"}(t,t.scopedSlots,e)+","),t.model&&(n+="model:{value:"+t.model.value+",callback:"+t.model.callback+",expression:"+t.model.expression+"},"),t.inlineTemplate){var i=function(t,e){var n=t.children[0];0;if(n&&1===n.type){var r=qa(n,e.options);return"inlineTemplate:{render:function(){"+r.render+"},staticRenderFns:["+r.staticRenderFns.map(function(t){return"function(){"+t+"}"}).join(",")+"]}"}}(t,e);i&&(n+=i+",")}return n=n.replace(/,$/,"")+"}",t.dynamicAttrs&&(n="_b("+n+',"'+t.tag+'",'+es(t.dynamicAttrs)+")"),t.wrapData&&(n=t.wrapData(n)),t.wrapListeners&&(n=t.wrapListeners(n)),n}function Xa(t){return 1===t.type&&("slot"===t.tag||t.children.some(Xa))}function Za(t,e){var n=t.attrsMap["slot-scope"];if(t.if&&!t.ifProcessed&&!n)return Wa(t,e,Za,"null");if(t.for&&!t.forProcessed)return Ya(t,e,Za);var r=t.slotScope===da?"":String(t.slotScope),o="function("+r+"){return "+("template"===t.tag?t.if&&n?"("+t.if+")?"+(Ja(t,e)||"undefined")+":undefined":Ja(t,e)||"undefined":Ha(t,e))+"}",i=r?"":",proxy:true";return"{key:"+(t.slotTarget||'"default"')+",fn:"+o+i+"}"}function Ja(t,e,n,r,o){var i=t.children;if(i.length){var a=i[0];if(1===i.length&&a.for&&"template"!==a.tag&&"slot"!==a.tag){var s=n?e.maybeComponent(a)?",1":",0":"";return""+(r||Ha)(a,e)+s}var c=n?function(t,e){for(var n=0,r=0;r<t.length;r++){var o=t[r];if(1===o.type){if(Qa(o)||o.ifConditions&&o.ifConditions.some(function(t){return Qa(t.block)})){n=2;break}(e(o)||o.ifConditions&&o.ifConditions.some(function(t){return e(t.block)}))&&(n=1)}}return n}(i,e.maybeComponent):0,u=o||ts;return"["+i.map(function(t){return u(t,e)}).join(",")+"]"+(c?","+c:"")}}function Qa(t){return void 0!==t.for||"template"===t.tag||"slot"===t.tag}function ts(t,e){return 1===t.type?Ha(t,e):3===t.type&&t.isComment?function(t){return"_e("+JSON.stringify(t.text)+")"}(t):function(t){return"_v("+(2===t.type?t.expression:ns(JSON.stringify(t.text)))+")"}(t)}function es(t){for(var e="",n="",r=0;r<t.length;r++){var o=t[r],i=ns(o.value);o.dynamic?n+=o.name+","+i+",":e+='"'+o.name+'":'+i+","}return e="{"+e.slice(0,-1)+"}",n?"_d("+e+",["+n.slice(0,-1)+"])":e}function ns(t){return t.replace(/\u2028/g,"\\u2028").replace(/\u2029/g,"\\u2029")}new RegExp("\\b"+"do,if,for,let,new,try,var,case,else,with,await,break,catch,class,const,super,throw,while,yield,delete,export,import,return,switch,default,extends,finally,continue,debugger,function,arguments".split(",").join("\\b|\\b")+"\\b"),new RegExp("\\b"+"delete,typeof,void".split(",").join("\\s*\\([^\\)]*\\)|\\b")+"\\s*\\([^\\)]*\\)");function rs(t,e){try{return new Function(t)}catch(n){return e.push({err:n,code:t}),L}}function os(t){var e=Object.create(null);return function(n,r,o){(r=O({},r)).warn;delete r.warn;var i=r.delimiters?String(r.delimiters)+n:n;if(e[i])return e[i];var a=t(n,r);var s={},c=[];return s.render=rs(a.render,c),s.staticRenderFns=a.staticRenderFns.map(function(t){return rs(t,c)}),e[i]=s}}var is,as,ss=(is=function(t,e){var n=ma(t.trim(),e);!1!==e.optimize&&Oa(n,e);var r=qa(n,e);return{ast:n,render:r.render,staticRenderFns:r.staticRenderFns}},function(t){function e(e,n){var r=Object.create(t),o=[],i=[];if(n)for(var a in n.modules&&(r.modules=(t.modules||[]).concat(n.modules)),n.directives&&(r.directives=O(Object.create(t.directives||null),n.directives)),n)"modules"!==a&&"directives"!==a&&(r[a]=n[a]);r.warn=function(t,e,n){(n?i:o).push(t)};var s=is(e.trim(),r);return s.errors=o,s.tips=i,s}return{compile:e,compileToFunctions:os(e)}})(Sa),cs=(ss.compile,ss.compileToFunctions);function us(t){return(as=as||document.createElement("div")).innerHTML=t?'<a href="\n"/>':'<div a="\n"/>',as.innerHTML.indexOf(" ")>0}var ls=!!Y&&us(!1),fs=!!Y&&us(!0),ps=k(function(t){var e=rr(t);return e&&e.innerHTML}),ds=Tn.prototype.$mount;Tn.prototype.$mount=function(t,e){if((t=t&&rr(t))===document.body||t===document.documentElement)return this;var n=this.$options;if(!n.render){var r=n.template;if(r)if("string"==typeof r)"#"===r.charAt(0)&&(r=ps(r));else{if(!r.nodeType)return this;r=r.innerHTML}else t&&(r=function(t){if(t.outerHTML)return t.outerHTML;var e=document.createElement("div");return e.appendChild(t.cloneNode(!0)),e.innerHTML}(t));if(r){0;var o=cs(r,{outputSourceRange:!1,shouldDecodeNewlines:ls,shouldDecodeNewlinesForHref:fs,delimiters:n.delimiters,comments:n.comments},this),i=o.render,a=o.staticRenderFns;n.render=i,n.staticRenderFns=a}}return ds.call(this,t,e)},Tn.compile=cs,e.a=Tn}).call(this,n(11),n(154).setImmediate)},function(t,e,n){var r=n(71),o="object"==typeof self&&self&&self.Object===Object&&self,i=r||o||Function("return this")();t.exports=i},function(t,e){var n=Array.isArray;t.exports=n},function(t,e,n){t.exports=n(99)},function(t,e){var n;n=function(){return this}();try{n=n||new Function("return this")()}catch(t){"object"==typeof window&&(n=window)}t.exports=n},function(t,e,n){var r=n(199),o=n(202);t.exports=function(t,e){var n=o(t,e);return r(n)?n:void 0}},function(t,e,n){"use strict";var r={props:{name:{required:!0},method:{default:null}},data:function(){return{segments:[],segmentsClass:""}},watch:{name:{immediate:!0,handler:function(){this.segments=this.name.split("\\"),this.segmentsClass=this.segments.pop()}}}},o=n(0),i=Object(o.a)(r,function(){var t=this,e=t.$createElement,n=t._self._c||e;return n("span",{staticClass:"ui-exception-class"},[t._l(t.segments,function(e,r){return n("span",{key:r,staticClass:"opacity-75"},[t._v(t._s(e)+"\\"),n("wbr")])}),n("span",[t._v(t._s(t.segmentsClass)),n("wbr")]),t.method?n("span",{staticClass:"opacity-75"},[t._v("::"+t._s(t.method))]):t._e()],2)},[],!1,null,null,null);e.a=i.exports},function(t,e,n){"use strict";var r={props:{lineNumber:{required:!0}}},o=n(0),i=Object(o.a)(r,function(){var t=this.$createElement,e=this._self._c||t;return e("span",{staticClass:"ui-line-number"},[this._v("\n :"),e("span",{staticClass:"font-mono"},[this._v(this._s(this.lineNumber))])])},[],!1,null,null,null);e.a=i.exports},function(t,e,n){var r=n(215);t.exports=function(t){return t&&t.length?r(t):[]}},function(t,e,n){var r=n(70);t.exports=function(t){return null==t?"":r(t)}},function(t,e,n){var r=n(22),o=n(176),i=n(177),a="[object Null]",s="[object Undefined]",c=r?r.toStringTag:void 0;t.exports=function(t){return null==t?void 0===t?s:a:c&&c in Object(t)?o(t):i(t)}},function(t,e){t.exports=function(t){return null!=t&&"object"==typeof t}},function(t,e){t.exports=function(t){var e=typeof t;return null!=t&&("object"==e||"function"==e)}},function(t,e){function n(t,e,n,r,o,i,a){try{var s=t[i](a),c=s.value}catch(t){return void n(t)}s.done?e(c):Promise.resolve(c).then(r,o)}t.exports=function(t){return function(){var e=this,r=arguments;return new Promise(function(o,i){var a=t.apply(e,r);function s(t){n(a,o,i,s,c,"next",t)}function c(t){n(a,o,i,s,c,"throw",t)}s(void 0)})}}},function(t,e){t.exports=function(t){return t.webpackPolyfill||(t.deprecate=function(){},t.paths=[],t.children||(t.children=[]),Object.defineProperty(t,"loaded",{enumerable:!0,get:function(){return t.l}}),Object.defineProperty(t,"id",{enumerable:!0,get:function(){return t.i}}),t.webpackPolyfill=1),t}},function(t,e,n){var r=n(8).Symbol;t.exports=r},function(t,e,n){var r=n(17),o=n(18),i="[object Symbol]";t.exports=function(t){return"symbol"==typeof t||o(t)&&r(t)==i}},function(t,e,n){"use strict";e.__esModule=!0;var r=c(n(180)),o=c(n(39)),i=c(n(185)),a=c(n(193)),s=c(n(194));function c(t){return t&&t.__esModule?t:{default:t}}var u=function(){function t(e,n){!function(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}(this,t),this.cfg=e||{},this.indentation=new i.default(this.cfg.indent),this.inlineBlock=new a.default,this.params=new s.default(this.cfg.params),this.tokenizer=n,this.previousReservedWord={},this.tokens=[],this.index=0}return t.prototype.format=function(t){return this.tokens=this.tokenizer.tokenize(t),this.getFormattedQueryFromTokens().trim()},t.prototype.getFormattedQueryFromTokens=function(){var t=this,e="";return this.tokens.forEach(function(n,r){t.index=r,n.type===o.default.WHITESPACE||(n.type===o.default.LINE_COMMENT?e=t.formatLineComment(n,e):n.type===o.default.BLOCK_COMMENT?e=t.formatBlockComment(n,e):n.type===o.default.RESERVED_TOPLEVEL?(e=t.formatToplevelReservedWord(n,e),t.previousReservedWord=n):n.type===o.default.RESERVED_NEWLINE?(e=t.formatNewlineReservedWord(n,e),t.previousReservedWord=n):n.type===o.default.RESERVED?(e=t.formatWithSpaces(n,e),t.previousReservedWord=n):e=n.type===o.default.OPEN_PAREN?t.formatOpeningParentheses(n,e):n.type===o.default.CLOSE_PAREN?t.formatClosingParentheses(n,e):n.type===o.default.PLACEHOLDER?t.formatPlaceholder(n,e):","===n.value?t.formatComma(n,e):":"===n.value?t.formatWithSpaceAfter(n,e):"."===n.value?t.formatWithoutSpaces(n,e):";"===n.value?t.formatQuerySeparator(n,e):t.formatWithSpaces(n,e))}),e},t.prototype.formatLineComment=function(t,e){return this.addNewline(e+t.value)},t.prototype.formatBlockComment=function(t,e){return this.addNewline(this.addNewline(e)+this.indentComment(t.value))},t.prototype.indentComment=function(t){return t.replace(/\n/g,"\n"+this.indentation.getIndent())},t.prototype.formatToplevelReservedWord=function(t,e){return this.indentation.decreaseTopLevel(),e=this.addNewline(e),this.indentation.increaseToplevel(),e+=this.equalizeWhitespace(t.value),this.addNewline(e)},t.prototype.formatNewlineReservedWord=function(t,e){return this.addNewline(e)+this.equalizeWhitespace(t.value)+" "},t.prototype.equalizeWhitespace=function(t){return t.replace(/\s+/g," ")},t.prototype.formatOpeningParentheses=function(t,e){return[o.default.WHITESPACE,o.default.OPEN_PAREN,o.default.LINE_COMMENT].includes(this.previousToken().type)||(e=(0,r.default)(e)),e+=t.value,this.inlineBlock.beginIfPossible(this.tokens,this.index),this.inlineBlock.isActive()||(this.indentation.increaseBlockLevel(),e=this.addNewline(e)),e},t.prototype.formatClosingParentheses=function(t,e){return this.inlineBlock.isActive()?(this.inlineBlock.end(),this.formatWithSpaceAfter(t,e)):(this.indentation.decreaseBlockLevel(),this.formatWithSpaces(t,this.addNewline(e)))},t.prototype.formatPlaceholder=function(t,e){return e+this.params.get(t)+" "},t.prototype.formatComma=function(t,e){return e=this.trimTrailingWhitespace(e)+t.value+" ",this.inlineBlock.isActive()?e:/^LIMIT$/i.test(this.previousReservedWord.value)?e:this.addNewline(e)},t.prototype.formatWithSpaceAfter=function(t,e){return this.trimTrailingWhitespace(e)+t.value+" "},t.prototype.formatWithoutSpaces=function(t,e){return this.trimTrailingWhitespace(e)+t.value},t.prototype.formatWithSpaces=function(t,e){return e+t.value+" "},t.prototype.formatQuerySeparator=function(t,e){return this.trimTrailingWhitespace(e)+t.value+"\n"},t.prototype.addNewline=function(t){return(0,r.default)(t)+"\n"+this.indentation.getIndent()},t.prototype.trimTrailingWhitespace=function(t){return this.previousNonWhitespaceToken().type===o.default.LINE_COMMENT?(0,r.default)(t)+"\n":(0,r.default)(t)},t.prototype.previousNonWhitespaceToken=function(){for(var t=1;this.previousToken(t).type===o.default.WHITESPACE;)t++;return this.previousToken(t)},t.prototype.previousToken=function(){var t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:1;return this.tokens[this.index-t]||{}},t}();e.default=u,t.exports=e.default},function(t,e,n){"use strict";e.__esModule=!0;var r=a(n(195)),o=a(n(210)),i=a(n(39));function a(t){return t&&t.__esModule?t:{default:t}}var s=function(){function t(e){!function(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}(this,t),this.WHITESPACE_REGEX=/^(\s+)/,this.NUMBER_REGEX=/^((-\s*)?[0-9]+(\.[0-9]+)?|0x[0-9a-fA-F]+|0b[01]+)\b/,this.OPERATOR_REGEX=/^(!=|<>|==|<=|>=|!<|!>|\|\||::|->>|->|~~\*|~~|!~~\*|!~~|~\*|!~\*|!~|.)/,this.BLOCK_COMMENT_REGEX=/^(\/\*[^]*?(?:\*\/|$))/,this.LINE_COMMENT_REGEX=this.createLineCommentRegex(e.lineCommentTypes),this.RESERVED_TOPLEVEL_REGEX=this.createReservedWordRegex(e.reservedToplevelWords),this.RESERVED_NEWLINE_REGEX=this.createReservedWordRegex(e.reservedNewlineWords),this.RESERVED_PLAIN_REGEX=this.createReservedWordRegex(e.reservedWords),this.WORD_REGEX=this.createWordRegex(e.specialWordChars),this.STRING_REGEX=this.createStringRegex(e.stringTypes),this.OPEN_PAREN_REGEX=this.createParenRegex(e.openParens),this.CLOSE_PAREN_REGEX=this.createParenRegex(e.closeParens),this.INDEXED_PLACEHOLDER_REGEX=this.createPlaceholderRegex(e.indexedPlaceholderTypes,"[0-9]*"),this.IDENT_NAMED_PLACEHOLDER_REGEX=this.createPlaceholderRegex(e.namedPlaceholderTypes,"[a-zA-Z0-9._$]+"),this.STRING_NAMED_PLACEHOLDER_REGEX=this.createPlaceholderRegex(e.namedPlaceholderTypes,this.createStringPattern(e.stringTypes))}return t.prototype.createLineCommentRegex=function(t){return new RegExp("^((?:"+t.map(function(t){return(0,o.default)(t)}).join("|")+").*?(?:\n|$))")},t.prototype.createReservedWordRegex=function(t){var e=t.join("|").replace(/ /g,"\\s+");return new RegExp("^("+e+")\\b","i")},t.prototype.createWordRegex=function(){var t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:[];return new RegExp("^([\\w"+t.join("")+"]+)")},t.prototype.createStringRegex=function(t){return new RegExp("^("+this.createStringPattern(t)+")")},t.prototype.createStringPattern=function(t){var e={"``":"((`[^`]*($|`))+)","[]":"((\\[[^\\]]*($|\\]))(\\][^\\]]*($|\\]))*)",'""':'(("[^"\\\\]*(?:\\\\.[^"\\\\]*)*("|$))+)',"''":"(('[^'\\\\]*(?:\\\\.[^'\\\\]*)*('|$))+)","N''":"((N'[^N'\\\\]*(?:\\\\.[^N'\\\\]*)*('|$))+)"};return t.map(function(t){return e[t]}).join("|")},t.prototype.createParenRegex=function(t){var e=this;return new RegExp("^("+t.map(function(t){return e.escapeParen(t)}).join("|")+")","i")},t.prototype.escapeParen=function(t){return 1===t.length?(0,o.default)(t):"\\b"+t+"\\b"},t.prototype.createPlaceholderRegex=function(t,e){if((0,r.default)(t))return!1;var n=t.map(o.default).join("|");return new RegExp("^((?:"+n+")(?:"+e+"))")},t.prototype.tokenize=function(t){for(var e=[],n=void 0;t.length;)n=this.getNextToken(t,n),t=t.substring(n.value.length),e.push(n);return e},t.prototype.getNextToken=function(t,e){return this.getWhitespaceToken(t)||this.getCommentToken(t)||this.getStringToken(t)||this.getOpenParenToken(t)||this.getCloseParenToken(t)||this.getPlaceholderToken(t)||this.getNumberToken(t)||this.getReservedWordToken(t,e)||this.getWordToken(t)||this.getOperatorToken(t)},t.prototype.getWhitespaceToken=function(t){return this.getTokenOnFirstMatch({input:t,type:i.default.WHITESPACE,regex:this.WHITESPACE_REGEX})},t.prototype.getCommentToken=function(t){return this.getLineCommentToken(t)||this.getBlockCommentToken(t)},t.prototype.getLineCommentToken=function(t){return this.getTokenOnFirstMatch({input:t,type:i.default.LINE_COMMENT,regex:this.LINE_COMMENT_REGEX})},t.prototype.getBlockCommentToken=function(t){return this.getTokenOnFirstMatch({input:t,type:i.default.BLOCK_COMMENT,regex:this.BLOCK_COMMENT_REGEX})},t.prototype.getStringToken=function(t){return this.getTokenOnFirstMatch({input:t,type:i.default.STRING,regex:this.STRING_REGEX})},t.prototype.getOpenParenToken=function(t){return this.getTokenOnFirstMatch({input:t,type:i.default.OPEN_PAREN,regex:this.OPEN_PAREN_REGEX})},t.prototype.getCloseParenToken=function(t){return this.getTokenOnFirstMatch({input:t,type:i.default.CLOSE_PAREN,regex:this.CLOSE_PAREN_REGEX})},t.prototype.getPlaceholderToken=function(t){return this.getIdentNamedPlaceholderToken(t)||this.getStringNamedPlaceholderToken(t)||this.getIndexedPlaceholderToken(t)},t.prototype.getIdentNamedPlaceholderToken=function(t){return this.getPlaceholderTokenWithKey({input:t,regex:this.IDENT_NAMED_PLACEHOLDER_REGEX,parseKey:function(t){return t.slice(1)}})},t.prototype.getStringNamedPlaceholderToken=function(t){var e=this;return this.getPlaceholderTokenWithKey({input:t,regex:this.STRING_NAMED_PLACEHOLDER_REGEX,parseKey:function(t){return e.getEscapedPlaceholderKey({key:t.slice(2,-1),quoteChar:t.slice(-1)})}})},t.prototype.getIndexedPlaceholderToken=function(t){return this.getPlaceholderTokenWithKey({input:t,regex:this.INDEXED_PLACEHOLDER_REGEX,parseKey:function(t){return t.slice(1)}})},t.prototype.getPlaceholderTokenWithKey=function(t){var e=t.input,n=t.regex,r=t.parseKey,o=this.getTokenOnFirstMatch({input:e,regex:n,type:i.default.PLACEHOLDER});return o&&(o.key=r(o.value)),o},t.prototype.getEscapedPlaceholderKey=function(t){var e=t.key,n=t.quoteChar;return e.replace(new RegExp((0,o.default)("\\")+n,"g"),n)},t.prototype.getNumberToken=function(t){return this.getTokenOnFirstMatch({input:t,type:i.default.NUMBER,regex:this.NUMBER_REGEX})},t.prototype.getOperatorToken=function(t){return this.getTokenOnFirstMatch({input:t,type:i.default.OPERATOR,regex:this.OPERATOR_REGEX})},t.prototype.getReservedWordToken=function(t,e){if(!e||!e.value||"."!==e.value)return this.getToplevelReservedToken(t)||this.getNewlineReservedToken(t)||this.getPlainReservedToken(t)},t.prototype.getToplevelReservedToken=function(t){return this.getTokenOnFirstMatch({input:t,type:i.default.RESERVED_TOPLEVEL,regex:this.RESERVED_TOPLEVEL_REGEX})},t.prototype.getNewlineReservedToken=function(t){return this.getTokenOnFirstMatch({input:t,type:i.default.RESERVED_NEWLINE,regex:this.RESERVED_NEWLINE_REGEX})},t.prototype.getPlainReservedToken=function(t){return this.getTokenOnFirstMatch({input:t,type:i.default.RESERVED,regex:this.RESERVED_PLAIN_REGEX})},t.prototype.getWordToken=function(t){return this.getTokenOnFirstMatch({input:t,type:i.default.WORD,regex:this.WORD_REGEX})},t.prototype.getTokenOnFirstMatch=function(t){var e=t.input,n=t.type,r=t.regex,o=e.match(r);if(o)return{type:n,value:o[1]}},t}();e.default=s,t.exports=e.default},function(t,e,n){var r=n(12)(Object,"create");t.exports=r},function(t,e,n){var r=n(223),o=n(224),i=n(225),a=n(226),s=n(227);function c(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}c.prototype.clear=r,c.prototype.delete=o,c.prototype.get=i,c.prototype.has=a,c.prototype.set=s,t.exports=c},function(t,e,n){var r=n(40);t.exports=function(t,e){for(var n=t.length;n--;)if(r(t[n][0],e))return n;return-1}},function(t,e,n){var r=n(229);t.exports=function(t,e){var n=t.__data__;return r(e)?n["string"==typeof e?"string":"hash"]:n.map}},function(t,e,n){var r=n(23),o=1/0;t.exports=function(t){if("string"==typeof t||r(t))return t;var e=t+"";return"0"==e&&1/t==-o?"-0":e}},function(t,e){t.exports=function(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}},function(t,e){function n(t,e){for(var n=0;n<e.length;n++){var r=e[n];r.enumerable=r.enumerable||!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(t,r.key,r)}}t.exports=function(t,e,r){return e&&n(t.prototype,e),r&&n(t,r),t}},function(t,e,n){"use strict";function r(t,e,n){var r=t.editor,o={sublime:"subl://open?url=file://%path&line=%line",textmate:"txmt://open?url=file://%path&line=%line",emacs:"emacs://open?url=file://%path&line=%line",macvim:"mvim://open/?url=file://%path&line=%line",phpstorm:"phpstorm://open?file=%path&line=%line",idea:"idea://open?file=%path&line=%line",vscode:"vscode://file/%path:%line","vscode-insiders":"vscode-insiders://file/%path:%line",atom:"atom://core/open/file?filename=%path&line=%line"};return e=(t.remoteSitesPath||!1).length>0&&(t.localSitesPath||!1).length>0?e.replace(t.remoteSitesPath,t.localSitesPath):e,Object.keys(o).includes(r)?o[r].replace("%path",encodeURIComponent(e)).replace("%line",encodeURIComponent(n)):(console.error("'".concat(r,"' is not supported. Support editors are: ").concat(Object.keys(o).join(", "))),null)}n.d(e,"a",function(){return r})},function(t,e,n){var r=n(171)("toUpperCase");t.exports=r},function(t,e,n){"use strict";var r={props:{label:{required:!0},name:{required:!0},disabled:{required:!1},value:{required:!1,default:!1}},methods:{checkboxChanged:function(t){this.$emit("input",t.target.checked)}}},o=n(0),i=Object(o.a)(r,function(){var t=this,e=t.$createElement,n=t._self._c||e;return n("label",{staticClass:"checkbox-label",class:t.disabled?"text-gray-400 pointer-events-none":"",attrs:{for:t.name}},[n("input",{staticClass:"checkbox",attrs:{id:t.name,type:"checkbox",disabled:t.disabled},domProps:{checked:t.value},on:{change:t.checkboxChanged}}),t._v("\n "+t._s(t.label)+"\n")])},[],!1,null,null,null);e.a=i.exports},function(t,e){t.exports=/[!-#%-\*,-\/:;\?@\[-\]_\{\}\xA1\xA7\xAB\xB6\xB7\xBB\xBF\u037E\u0387\u055A-\u055F\u0589\u058A\u05BE\u05C0\u05C3\u05C6\u05F3\u05F4\u0609\u060A\u060C\u060D\u061B\u061E\u061F\u066A-\u066D\u06D4\u0700-\u070D\u07F7-\u07F9\u0830-\u083E\u085E\u0964\u0965\u0970\u09FD\u0A76\u0AF0\u0C84\u0DF4\u0E4F\u0E5A\u0E5B\u0F04-\u0F12\u0F14\u0F3A-\u0F3D\u0F85\u0FD0-\u0FD4\u0FD9\u0FDA\u104A-\u104F\u10FB\u1360-\u1368\u1400\u166D\u166E\u169B\u169C\u16EB-\u16ED\u1735\u1736\u17D4-\u17D6\u17D8-\u17DA\u1800-\u180A\u1944\u1945\u1A1E\u1A1F\u1AA0-\u1AA6\u1AA8-\u1AAD\u1B5A-\u1B60\u1BFC-\u1BFF\u1C3B-\u1C3F\u1C7E\u1C7F\u1CC0-\u1CC7\u1CD3\u2010-\u2027\u2030-\u2043\u2045-\u2051\u2053-\u205E\u207D\u207E\u208D\u208E\u2308-\u230B\u2329\u232A\u2768-\u2775\u27C5\u27C6\u27E6-\u27EF\u2983-\u2998\u29D8-\u29DB\u29FC\u29FD\u2CF9-\u2CFC\u2CFE\u2CFF\u2D70\u2E00-\u2E2E\u2E30-\u2E4E\u3001-\u3003\u3008-\u3011\u3014-\u301F\u3030\u303D\u30A0\u30FB\uA4FE\uA4FF\uA60D-\uA60F\uA673\uA67E\uA6F2-\uA6F7\uA874-\uA877\uA8CE\uA8CF\uA8F8-\uA8FA\uA8FC\uA92E\uA92F\uA95F\uA9C1-\uA9CD\uA9DE\uA9DF\uAA5C-\uAA5F\uAADE\uAADF\uAAF0\uAAF1\uABEB\uFD3E\uFD3F\uFE10-\uFE19\uFE30-\uFE52\uFE54-\uFE61\uFE63\uFE68\uFE6A\uFE6B\uFF01-\uFF03\uFF05-\uFF0A\uFF0C-\uFF0F\uFF1A\uFF1B\uFF1F\uFF20\uFF3B-\uFF3D\uFF3F\uFF5B\uFF5D\uFF5F-\uFF65]|\uD800[\uDD00-\uDD02\uDF9F\uDFD0]|\uD801\uDD6F|\uD802[\uDC57\uDD1F\uDD3F\uDE50-\uDE58\uDE7F\uDEF0-\uDEF6\uDF39-\uDF3F\uDF99-\uDF9C]|\uD803[\uDF55-\uDF59]|\uD804[\uDC47-\uDC4D\uDCBB\uDCBC\uDCBE-\uDCC1\uDD40-\uDD43\uDD74\uDD75\uDDC5-\uDDC8\uDDCD\uDDDB\uDDDD-\uDDDF\uDE38-\uDE3D\uDEA9]|\uD805[\uDC4B-\uDC4F\uDC5B\uDC5D\uDCC6\uDDC1-\uDDD7\uDE41-\uDE43\uDE60-\uDE6C\uDF3C-\uDF3E]|\uD806[\uDC3B\uDE3F-\uDE46\uDE9A-\uDE9C\uDE9E-\uDEA2]|\uD807[\uDC41-\uDC45\uDC70\uDC71\uDEF7\uDEF8]|\uD809[\uDC70-\uDC74]|\uD81A[\uDE6E\uDE6F\uDEF5\uDF37-\uDF3B\uDF44]|\uD81B[\uDE97-\uDE9A]|\uD82F\uDC9F|\uD836[\uDE87-\uDE8B]|\uD83A[\uDD5E\uDD5F]/},function(t,e,n){"use strict";function r(){this.__rules__=[],this.__cache__=null}r.prototype.__find__=function(t){for(var e=0;e<this.__rules__.length;e++)if(this.__rules__[e].name===t)return e;return-1},r.prototype.__compile__=function(){var t=this,e=[""];t.__rules__.forEach(function(t){t.enabled&&t.alt.forEach(function(t){e.indexOf(t)<0&&e.push(t)})}),t.__cache__={},e.forEach(function(e){t.__cache__[e]=[],t.__rules__.forEach(function(n){n.enabled&&(e&&n.alt.indexOf(e)<0||t.__cache__[e].push(n.fn))})})},r.prototype.at=function(t,e,n){var r=this.__find__(t),o=n||{};if(-1===r)throw new Error("Parser rule not found: "+t);this.__rules__[r].fn=e,this.__rules__[r].alt=o.alt||[],this.__cache__=null},r.prototype.before=function(t,e,n,r){var o=this.__find__(t),i=r||{};if(-1===o)throw new Error("Parser rule not found: "+t);this.__rules__.splice(o,0,{name:e,enabled:!0,fn:n,alt:i.alt||[]}),this.__cache__=null},r.prototype.after=function(t,e,n,r){var o=this.__find__(t),i=r||{};if(-1===o)throw new Error("Parser rule not found: "+t);this.__rules__.splice(o+1,0,{name:e,enabled:!0,fn:n,alt:i.alt||[]}),this.__cache__=null},r.prototype.push=function(t,e,n){var r=n||{};this.__rules__.push({name:t,enabled:!0,fn:e,alt:r.alt||[]}),this.__cache__=null},r.prototype.enable=function(t,e){Array.isArray(t)||(t=[t]);var n=[];return t.forEach(function(t){var r=this.__find__(t);if(r<0){if(e)return;throw new Error("Rules manager: invalid rule name "+t)}this.__rules__[r].enabled=!0,n.push(t)},this),this.__cache__=null,n},r.prototype.enableOnly=function(t,e){Array.isArray(t)||(t=[t]),this.__rules__.forEach(function(t){t.enabled=!1}),this.enable(t,e)},r.prototype.disable=function(t,e){Array.isArray(t)||(t=[t]);var n=[];return t.forEach(function(t){var r=this.__find__(t);if(r<0){if(e)return;throw new Error("Rules manager: invalid rule name "+t)}this.__rules__[r].enabled=!1,n.push(t)},this),this.__cache__=null,n},r.prototype.getRules=function(t){return null===this.__cache__&&this.__compile__(),this.__cache__[t]||[]},t.exports=r},function(t,e,n){"use strict";function r(t,e,n){this.type=t,this.tag=e,this.attrs=null,this.map=null,this.nesting=n,this.level=0,this.children=null,this.content="",this.markup="",this.info="",this.meta=null,this.block=!1,this.hidden=!1}r.prototype.attrIndex=function(t){var e,n,r;if(!this.attrs)return-1;for(n=0,r=(e=this.attrs).length;n<r;n++)if(e[n][0]===t)return n;return-1},r.prototype.attrPush=function(t){this.attrs?this.attrs.push(t):this.attrs=[t]},r.prototype.attrSet=function(t,e){var n=this.attrIndex(t),r=[t,e];n<0?this.attrPush(r):this.attrs[n]=r},r.prototype.attrGet=function(t){var e=this.attrIndex(t),n=null;return e>=0&&(n=this.attrs[e][1]),n},r.prototype.attrJoin=function(t,e){var n=this.attrIndex(t);n<0?this.attrPush([t,e]):this.attrs[n][1]=this.attrs[n][1]+" "+e},t.exports=r},function(t,e,n){"use strict";e.__esModule=!0,e.default={WHITESPACE:"whitespace",WORD:"word",STRING:"string",RESERVED:"reserved",RESERVED_TOPLEVEL:"reserved-toplevel",RESERVED_NEWLINE:"reserved-newline",OPERATOR:"operator",OPEN_PAREN:"open-paren",CLOSE_PAREN:"close-paren",LINE_COMMENT:"line-comment",BLOCK_COMMENT:"block-comment",NUMBER:"number",PLACEHOLDER:"placeholder"},t.exports=e.default},function(t,e){t.exports=function(t,e){return t===e||t!=t&&e!=e}},function(t,e,n){var r=n(73),o=n(42);t.exports=function(t){return null!=t&&o(t.length)&&!r(t)}},function(t,e){var n=9007199254740991;t.exports=function(t){return"number"==typeof t&&t>-1&&t%1==0&&t<=n}},function(t,e){var n=9007199254740991,r=/^(?:0|[1-9]\d*)$/;t.exports=function(t,e){var o=typeof t;return!!(e=null==e?n:e)&&("number"==o||"symbol"!=o&&r.test(t))&&t>-1&&t%1==0&&t<e}},function(t,e,n){var r=n(12)(n(8),"Map");t.exports=r},function(t,e,n){var r=n(205),o=n(18),i=Object.prototype,a=i.hasOwnProperty,s=i.propertyIsEnumerable,c=r(function(){return arguments}())?r:function(t){return o(t)&&a.call(t,"callee")&&!s.call(t,"callee")};t.exports=c},function(t,e,n){(function(t){var r=n(8),o=n(206),i=e&&!e.nodeType&&e,a=i&&"object"==typeof t&&t&&!t.nodeType&&t,s=a&&a.exports===i?r.Buffer:void 0,c=(s?s.isBuffer:void 0)||o;t.exports=c}).call(this,n(21)(t))},function(t,e,n){var r=n(207),o=n(208),i=n(209),a=i&&i.isTypedArray,s=a?o(a):r;t.exports=s},function(t,e,n){var r=n(216),o=n(228),i=n(230),a=n(231),s=n(232);function c(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}c.prototype.clear=r,c.prototype.delete=o,c.prototype.get=i,c.prototype.has=a,c.prototype.set=s,t.exports=c},function(t,e){t.exports=function(t){var e=-1,n=Array(t.size);return t.forEach(function(t){n[++e]=t}),n}},function(t,e,n){var r=n(243),o=n(74),i=n(41);t.exports=function(t){return i(t)?r(t):o(t)}},function(t,e,n){var r=n(9),o=n(23),i=/\.|\[(?:[^[\]]*|(["'])(?:(?!\1)[^\\]|\\.)*?\1)\]/,a=/^\w*$/;t.exports=function(t,e){if(r(t))return!1;var n=typeof t;return!("number"!=n&&"symbol"!=n&&"boolean"!=n&&null!=t&&!o(t))||a.test(t)||!i.test(t)||null!=e&&t in Object(e)}},function(t,e,n){"use strict";var r=n(163);function o(t){if("string"!=typeof t)throw new Error("The url must be a string.");var e=r(t),n=e.resource.split("."),i=null;switch(e.toString=function(t){return o.stringify(this,t)},e.source=n.length>2?n.slice(1-n.length).join("."):e.source=e.resource,e.git_suffix=/\.git$/.test(e.pathname),e.name=decodeURIComponent(e.pathname.replace(/^\//,"").replace(/\.git$/,"")),e.owner=decodeURIComponent(e.user),e.source){case"git.cloudforge.com":e.owner=e.user,e.organization=n[0],e.source="cloudforge.com";break;case"visualstudio.com":if("vs-ssh.visualstudio.com"===e.resource){4===(i=e.name.split("/")).length&&(e.organization=i[1],e.owner=i[2],e.name=i[3],e.full_name=i[2]+"/"+i[3]);break}2===(i=e.name.split("/")).length?(e.owner=i[1],e.name=i[1],e.full_name="_git/"+e.name):3===i.length?(e.name=i[2],"DefaultCollection"===i[0]?(e.owner=i[2],e.organization=i[0],e.full_name=e.organization+"/_git/"+e.name):(e.owner=i[0],e.full_name=e.owner+"/_git/"+e.name)):4===i.length&&(e.organization=i[0],e.owner=i[1],e.name=i[3],e.full_name=e.organization+"/"+e.owner+"/_git/"+e.name);break;case"dev.azure.com":case"azure.com":if("ssh.dev.azure.com"===e.resource){4===(i=e.name.split("/")).length&&(e.organization=i[1],e.owner=i[2],e.name=i[3]);break}5===(i=e.name.split("/")).length?(e.organization=i[0],e.owner=i[1],e.name=i[4],e.full_name="_git/"+e.name):3===i.length?(e.name=i[2],"DefaultCollection"===i[0]?(e.owner=i[2],e.organization=i[0],e.full_name=e.organization+"/_git/"+e.name):(e.owner=i[0],e.full_name=e.owner+"/_git/"+e.name)):4===i.length&&(e.organization=i[0],e.owner=i[1],e.name=i[3],e.full_name=e.organization+"/"+e.owner+"/_git/"+e.name);break;default:var a=(i=e.name.split("/")).length-1;if(i.length>=2){var s=i.indexOf("blob",2),c=i.indexOf("tree",2),u=i.indexOf("commit",2);a=s>0?s-1:c>0?c-1:u>0?u-1:a,e.owner=i.slice(0,a).join("/"),e.name=i[a],u&&(e.commit=i[a+2])}e.ref="",e.filepathtype="",e.filepath="",i.length>a+2&&["blob","tree"].indexOf(i[a+1])>=0&&(e.filepathtype=i[a+1],e.ref=i[a+2],i.length>a+3&&(e.filepath=i.slice(a+3).join("/"))),e.organization=e.owner}return e.full_name||(e.full_name=e.owner,e.name&&(e.full_name&&(e.full_name+="/"),e.full_name+=e.name)),e}o.stringify=function(t,e){e=e||(t.protocols&&t.protocols.length?t.protocols.join("+"):t.protocol);var n=t.port?":"+t.port:"",r=t.user||"git",o=t.git_suffix?".git":"";switch(e){case"ssh":return n?"ssh://"+r+"@"+t.resource+n+"/"+t.full_name+o:r+"@"+t.resource+":"+t.full_name+o;case"git+ssh":case"ssh+git":case"ftp":case"ftps":return e+"://"+r+"@"+t.resource+n+"/"+t.full_name+o;case"http":case"https":return e+"://"+(t.token?
/*!
* buildToken
* Builds OAuth token prefix (helper function)
*
* @name buildToken
* @function
* @param {GitUrl} obj The parsed Git url object.
* @return {String} token prefix
*/
function(t){switch(t.source){case"bitbucket.org":return"x-token-auth:"+t.token+"@";default:return t.token+"@"}}(t):t.user&&(t.protocols.includes("http")||t.protocols.includes("https"))?t.user+"@":"")+t.resource+n+"/"+t.full_name+o;default:return t.href}},t.exports=o},function(t,e,n){(function(t,r){var o;
/**
* @license
* Lodash <https://lodash.com/>
* Copyright OpenJS Foundation and other contributors <https://openjsf.org/>
* Released under MIT license <https://lodash.com/license>
* Based on Underscore.js 1.8.3 <http://underscorejs.org/LICENSE>
* Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors
*/(function(){var i,a=200,s="Unsupported core-js use. Try https://npms.io/search?q=ponyfill.",c="Expected a function",u="__lodash_hash_undefined__",l=500,f="__lodash_placeholder__",p=1,d=2,h=4,m=1,g=2,v=1,b=2,_=4,y=8,E=16,k=32,x=64,w=128,C=256,A=512,T=30,S="...",R=800,O=16,N=1,L=2,I=1/0,D=9007199254740991,M=17976931348623157e292,P=NaN,j=4294967295,U=j-1,F=j>>>1,$=[["ary",w],["bind",v],["bindKey",b],["curry",y],["curryRight",E],["flip",A],["partial",k],["partialRight",x],["rearg",C]],B="[object Arguments]",z="[object Array]",q="[object AsyncFunction]",H="[object Boolean]",G="[object Date]",V="[object DOMException]",W="[object Error]",Y="[object Function]",K="[object GeneratorFunction]",X="[object Map]",Z="[object Number]",J="[object Null]",Q="[object Object]",tt="[object Proxy]",et="[object RegExp]",nt="[object Set]",rt="[object String]",ot="[object Symbol]",it="[object Undefined]",at="[object WeakMap]",st="[object WeakSet]",ct="[object ArrayBuffer]",ut="[object DataView]",lt="[object Float32Array]",ft="[object Float64Array]",pt="[object Int8Array]",dt="[object Int16Array]",ht="[object Int32Array]",mt="[object Uint8Array]",gt="[object Uint8ClampedArray]",vt="[object Uint16Array]",bt="[object Uint32Array]",_t=/\b__p \+= '';/g,yt=/\b(__p \+=) '' \+/g,Et=/(__e\(.*?\)|\b__t\)) \+\n'';/g,kt=/&(?:amp|lt|gt|quot|#39);/g,xt=/[&<>"']/g,wt=RegExp(kt.source),Ct=RegExp(xt.source),At=/<%-([\s\S]+?)%>/g,Tt=/<%([\s\S]+?)%>/g,St=/<%=([\s\S]+?)%>/g,Rt=/\.|\[(?:[^[\]]*|(["'])(?:(?!\1)[^\\]|\\.)*?\1)\]/,Ot=/^\w*$/,Nt=/[^.[\]]+|\[(?:(-?\d+(?:\.\d+)?)|(["'])((?:(?!\2)[^\\]|\\.)*?)\2)\]|(?=(?:\.|\[\])(?:\.|\[\]|$))/g,Lt=/[\\^$.*+?()[\]{}|]/g,It=RegExp(Lt.source),Dt=/^\s+|\s+$/g,Mt=/^\s+/,Pt=/\s+$/,jt=/\{(?:\n\/\* \[wrapped with .+\] \*\/)?\n?/,Ut=/\{\n\/\* \[wrapped with (.+)\] \*/,Ft=/,? & /,$t=/[^\x00-\x2f\x3a-\x40\x5b-\x60\x7b-\x7f]+/g,Bt=/\\(\\)?/g,zt=/\$\{([^\\}]*(?:\\.[^\\}]*)*)\}/g,qt=/\w*$/,Ht=/^[-+]0x[0-9a-f]+$/i,Gt=/^0b[01]+$/i,Vt=/^\[object .+?Constructor\]$/,Wt=/^0o[0-7]+$/i,Yt=/^(?:0|[1-9]\d*)$/,Kt=/[\xc0-\xd6\xd8-\xf6\xf8-\xff\u0100-\u017f]/g,Xt=/($^)/,Zt=/['\n\r\u2028\u2029\\]/g,Jt="\\u0300-\\u036f\\ufe20-\\ufe2f\\u20d0-\\u20ff",Qt="\\xac\\xb1\\xd7\\xf7\\x00-\\x2f\\x3a-\\x40\\x5b-\\x60\\x7b-\\xbf\\u2000-\\u206f \\t\\x0b\\f\\xa0\\ufeff\\n\\r\\u2028\\u2029\\u1680\\u180e\\u2000\\u2001\\u2002\\u2003\\u2004\\u2005\\u2006\\u2007\\u2008\\u2009\\u200a\\u202f\\u205f\\u3000",te="[\\ud800-\\udfff]",ee="["+Qt+"]",ne="["+Jt+"]",re="\\d+",oe="[\\u2700-\\u27bf]",ie="[a-z\\xdf-\\xf6\\xf8-\\xff]",ae="[^\\ud800-\\udfff"+Qt+re+"\\u2700-\\u27bfa-z\\xdf-\\xf6\\xf8-\\xffA-Z\\xc0-\\xd6\\xd8-\\xde]",se="\\ud83c[\\udffb-\\udfff]",ce="[^\\ud800-\\udfff]",ue="(?:\\ud83c[\\udde6-\\uddff]){2}",le="[\\ud800-\\udbff][\\udc00-\\udfff]",fe="[A-Z\\xc0-\\xd6\\xd8-\\xde]",pe="(?:"+ie+"|"+ae+")",de="(?:"+fe+"|"+ae+")",he="(?:"+ne+"|"+se+")"+"?",me="[\\ufe0e\\ufe0f]?"+he+("(?:\\u200d(?:"+[ce,ue,le].join("|")+")[\\ufe0e\\ufe0f]?"+he+")*"),ge="(?:"+[oe,ue,le].join("|")+")"+me,ve="(?:"+[ce+ne+"?",ne,ue,le,te].join("|")+")",be=RegExp("['’]","g"),_e=RegExp(ne,"g"),ye=RegExp(se+"(?="+se+")|"+ve+me,"g"),Ee=RegExp([fe+"?"+ie+"+(?:['’](?:d|ll|m|re|s|t|ve))?(?="+[ee,fe,"$"].join("|")+")",de+"+(?:['’](?:D|LL|M|RE|S|T|VE))?(?="+[ee,fe+pe,"$"].join("|")+")",fe+"?"+pe+"+(?:['’](?:d|ll|m|re|s|t|ve))?",fe+"+(?:['’](?:D|LL|M|RE|S|T|VE))?","\\d*(?:1ST|2ND|3RD|(?![123])\\dTH)(?=\\b|[a-z_])","\\d*(?:1st|2nd|3rd|(?![123])\\dth)(?=\\b|[A-Z_])",re,ge].join("|"),"g"),ke=RegExp("[\\u200d\\ud800-\\udfff"+Jt+"\\ufe0e\\ufe0f]"),xe=/[a-z][A-Z]|[A-Z]{2}[a-z]|[0-9][a-zA-Z]|[a-zA-Z][0-9]|[^a-zA-Z0-9 ]/,we=["Array","Buffer","DataView","Date","Error","Float32Array","Float64Array","Function","Int8Array","Int16Array","Int32Array","Map","Math","Object","Promise","RegExp","Set","String","Symbol","TypeError","Uint8Array","Uint8ClampedArray","Uint16Array","Uint32Array","WeakMap","_","clearTimeout","isFinite","parseInt","setTimeout"],Ce=-1,Ae={};Ae[lt]=Ae[ft]=Ae[pt]=Ae[dt]=Ae[ht]=Ae[mt]=Ae[gt]=Ae[vt]=Ae[bt]=!0,Ae[B]=Ae[z]=Ae[ct]=Ae[H]=Ae[ut]=Ae[G]=Ae[W]=Ae[Y]=Ae[X]=Ae[Z]=Ae[Q]=Ae[et]=Ae[nt]=Ae[rt]=Ae[at]=!1;var Te={};Te[B]=Te[z]=Te[ct]=Te[ut]=Te[H]=Te[G]=Te[lt]=Te[ft]=Te[pt]=Te[dt]=Te[ht]=Te[X]=Te[Z]=Te[Q]=Te[et]=Te[nt]=Te[rt]=Te[ot]=Te[mt]=Te[gt]=Te[vt]=Te[bt]=!0,Te[W]=Te[Y]=Te[at]=!1;var Se={"\\":"\\","'":"'","\n":"n","\r":"r","\u2028":"u2028","\u2029":"u2029"},Re=parseFloat,Oe=parseInt,Ne="object"==typeof t&&t&&t.Object===Object&&t,Le="object"==typeof self&&self&&self.Object===Object&&self,Ie=Ne||Le||Function("return this")(),De=e&&!e.nodeType&&e,Me=De&&"object"==typeof r&&r&&!r.nodeType&&r,Pe=Me&&Me.exports===De,je=Pe&&Ne.process,Ue=function(){try{var t=Me&&Me.require&&Me.require("util").types;return t||je&&je.binding&&je.binding("util")}catch(t){}}(),Fe=Ue&&Ue.isArrayBuffer,$e=Ue&&Ue.isDate,Be=Ue&&Ue.isMap,ze=Ue&&Ue.isRegExp,qe=Ue&&Ue.isSet,He=Ue&&Ue.isTypedArray;function Ge(t,e,n){switch(n.length){case 0:return t.call(e);case 1:return t.call(e,n[0]);case 2:return t.call(e,n[0],n[1]);case 3:return t.call(e,n[0],n[1],n[2])}return t.apply(e,n)}function Ve(t,e,n,r){for(var o=-1,i=null==t?0:t.length;++o<i;){var a=t[o];e(r,a,n(a),t)}return r}function We(t,e){for(var n=-1,r=null==t?0:t.length;++n<r&&!1!==e(t[n],n,t););return t}function Ye(t,e){for(var n=null==t?0:t.length;n--&&!1!==e(t[n],n,t););return t}function Ke(t,e){for(var n=-1,r=null==t?0:t.length;++n<r;)if(!e(t[n],n,t))return!1;return!0}function Xe(t,e){for(var n=-1,r=null==t?0:t.length,o=0,i=[];++n<r;){var a=t[n];e(a,n,t)&&(i[o++]=a)}return i}function Ze(t,e){return!!(null==t?0:t.length)&&cn(t,e,0)>-1}function Je(t,e,n){for(var r=-1,o=null==t?0:t.length;++r<o;)if(n(e,t[r]))return!0;return!1}function Qe(t,e){for(var n=-1,r=null==t?0:t.length,o=Array(r);++n<r;)o[n]=e(t[n],n,t);return o}function tn(t,e){for(var n=-1,r=e.length,o=t.length;++n<r;)t[o+n]=e[n];return t}function en(t,e,n,r){var o=-1,i=null==t?0:t.length;for(r&&i&&(n=t[++o]);++o<i;)n=e(n,t[o],o,t);return n}function nn(t,e,n,r){var o=null==t?0:t.length;for(r&&o&&(n=t[--o]);o--;)n=e(n,t[o],o,t);return n}function rn(t,e){for(var n=-1,r=null==t?0:t.length;++n<r;)if(e(t[n],n,t))return!0;return!1}var on=pn("length");function an(t,e,n){var r;return n(t,function(t,n,o){if(e(t,n,o))return r=n,!1}),r}function sn(t,e,n,r){for(var o=t.length,i=n+(r?1:-1);r?i--:++i<o;)if(e(t[i],i,t))return i;return-1}function cn(t,e,n){return e==e?function(t,e,n){var r=n-1,o=t.length;for(;++r<o;)if(t[r]===e)return r;return-1}(t,e,n):sn(t,ln,n)}function un(t,e,n,r){for(var o=n-1,i=t.length;++o<i;)if(r(t[o],e))return o;return-1}function ln(t){return t!=t}function fn(t,e){var n=null==t?0:t.length;return n?mn(t,e)/n:P}function pn(t){return function(e){return null==e?i:e[t]}}function dn(t){return function(e){return null==t?i:t[e]}}function hn(t,e,n,r,o){return o(t,function(t,o,i){n=r?(r=!1,t):e(n,t,o,i)}),n}function mn(t,e){for(var n,r=-1,o=t.length;++r<o;){var a=e(t[r]);a!==i&&(n=n===i?a:n+a)}return n}function gn(t,e){for(var n=-1,r=Array(t);++n<t;)r[n]=e(n);return r}function vn(t){return function(e){return t(e)}}function bn(t,e){return Qe(e,function(e){return t[e]})}function _n(t,e){return t.has(e)}function yn(t,e){for(var n=-1,r=t.length;++n<r&&cn(e,t[n],0)>-1;);return n}function En(t,e){for(var n=t.length;n--&&cn(e,t[n],0)>-1;);return n}var kn=dn({"À":"A","Á":"A","Â":"A","Ã":"A","Ä":"A","Å":"A","à":"a","á":"a","â":"a","ã":"a","ä":"a","å":"a","Ç":"C","ç":"c","Ð":"D","ð":"d","È":"E","É":"E","Ê":"E","Ë":"E","è":"e","é":"e","ê":"e","ë":"e","Ì":"I","Í":"I","Î":"I","Ï":"I","ì":"i","í":"i","î":"i","ï":"i","Ñ":"N","ñ":"n","Ò":"O","Ó":"O","Ô":"O","Õ":"O","Ö":"O","Ø":"O","ò":"o","ó":"o","ô":"o","õ":"o","ö":"o","ø":"o","Ù":"U","Ú":"U","Û":"U","Ü":"U","ù":"u","ú":"u","û":"u","ü":"u","Ý":"Y","ý":"y","ÿ":"y","Æ":"Ae","æ":"ae","Þ":"Th","þ":"th","ß":"ss","Ā":"A","Ă":"A","Ą":"A","ā":"a","ă":"a","ą":"a","Ć":"C","Ĉ":"C","Ċ":"C","Č":"C","ć":"c","ĉ":"c","ċ":"c","č":"c","Ď":"D","Đ":"D","ď":"d","đ":"d","Ē":"E","Ĕ":"E","Ė":"E","Ę":"E","Ě":"E","ē":"e","ĕ":"e","ė":"e","ę":"e","ě":"e","Ĝ":"G","Ğ":"G","Ġ":"G","Ģ":"G","ĝ":"g","ğ":"g","ġ":"g","ģ":"g","Ĥ":"H","Ħ":"H","ĥ":"h","ħ":"h","Ĩ":"I","Ī":"I","Ĭ":"I","Į":"I","İ":"I","ĩ":"i","ī":"i","ĭ":"i","į":"i","ı":"i","Ĵ":"J","ĵ":"j","Ķ":"K","ķ":"k","ĸ":"k","Ĺ":"L","Ļ":"L","Ľ":"L","Ŀ":"L","Ł":"L","ĺ":"l","ļ":"l","ľ":"l","ŀ":"l","ł":"l","Ń":"N","Ņ":"N","Ň":"N","Ŋ":"N","ń":"n","ņ":"n","ň":"n","ŋ":"n","Ō":"O","Ŏ":"O","Ő":"O","ō":"o","ŏ":"o","ő":"o","Ŕ":"R","Ŗ":"R","Ř":"R","ŕ":"r","ŗ":"r","ř":"r","Ś":"S","Ŝ":"S","Ş":"S","Š":"S","ś":"s","ŝ":"s","ş":"s","š":"s","Ţ":"T","Ť":"T","Ŧ":"T","ţ":"t","ť":"t","ŧ":"t","Ũ":"U","Ū":"U","Ŭ":"U","Ů":"U","Ű":"U","Ų":"U","ũ":"u","ū":"u","ŭ":"u","ů":"u","ű":"u","ų":"u","Ŵ":"W","ŵ":"w","Ŷ":"Y","ŷ":"y","Ÿ":"Y","Ź":"Z","Ż":"Z","Ž":"Z","ź":"z","ż":"z","ž":"z","IJ":"IJ","ij":"ij","Œ":"Oe","œ":"oe","ʼn":"'n","ſ":"s"}),xn=dn({"&":"&","<":"<",">":">",'"':""","'":"'"});function wn(t){return"\\"+Se[t]}function Cn(t){return ke.test(t)}function An(t){var e=-1,n=Array(t.size);return t.forEach(function(t,r){n[++e]=[r,t]}),n}function Tn(t,e){return function(n){return t(e(n))}}function Sn(t,e){for(var n=-1,r=t.length,o=0,i=[];++n<r;){var a=t[n];a!==e&&a!==f||(t[n]=f,i[o++]=n)}return i}function Rn(t){var e=-1,n=Array(t.size);return t.forEach(function(t){n[++e]=t}),n}function On(t){var e=-1,n=Array(t.size);return t.forEach(function(t){n[++e]=[t,t]}),n}function Nn(t){return Cn(t)?function(t){var e=ye.lastIndex=0;for(;ye.test(t);)++e;return e}(t):on(t)}function Ln(t){return Cn(t)?function(t){return t.match(ye)||[]}(t):function(t){return t.split("")}(t)}var In=dn({"&":"&","<":"<",">":">",""":'"',"'":"'"});var Dn=function t(e){var n,r=(e=null==e?Ie:Dn.defaults(Ie.Object(),e,Dn.pick(Ie,we))).Array,o=e.Date,Jt=e.Error,Qt=e.Function,te=e.Math,ee=e.Object,ne=e.RegExp,re=e.String,oe=e.TypeError,ie=r.prototype,ae=Qt.prototype,se=ee.prototype,ce=e["__core-js_shared__"],ue=ae.toString,le=se.hasOwnProperty,fe=0,pe=(n=/[^.]+$/.exec(ce&&ce.keys&&ce.keys.IE_PROTO||""))?"Symbol(src)_1."+n:"",de=se.toString,he=ue.call(ee),me=Ie._,ge=ne("^"+ue.call(le).replace(Lt,"\\$&").replace(/hasOwnProperty|(function).*?(?=\\\()| for .+?(?=\\\])/g,"$1.*?")+"$"),ve=Pe?e.Buffer:i,ye=e.Symbol,ke=e.Uint8Array,Se=ve?ve.allocUnsafe:i,Ne=Tn(ee.getPrototypeOf,ee),Le=ee.create,De=se.propertyIsEnumerable,Me=ie.splice,je=ye?ye.isConcatSpreadable:i,Ue=ye?ye.iterator:i,on=ye?ye.toStringTag:i,dn=function(){try{var t=Fi(ee,"defineProperty");return t({},"",{}),t}catch(t){}}(),Mn=e.clearTimeout!==Ie.clearTimeout&&e.clearTimeout,Pn=o&&o.now!==Ie.Date.now&&o.now,jn=e.setTimeout!==Ie.setTimeout&&e.setTimeout,Un=te.ceil,Fn=te.floor,$n=ee.getOwnPropertySymbols,Bn=ve?ve.isBuffer:i,zn=e.isFinite,qn=ie.join,Hn=Tn(ee.keys,ee),Gn=te.max,Vn=te.min,Wn=o.now,Yn=e.parseInt,Kn=te.random,Xn=ie.reverse,Zn=Fi(e,"DataView"),Jn=Fi(e,"Map"),Qn=Fi(e,"Promise"),tr=Fi(e,"Set"),er=Fi(e,"WeakMap"),nr=Fi(ee,"create"),rr=er&&new er,or={},ir=fa(Zn),ar=fa(Jn),sr=fa(Qn),cr=fa(tr),ur=fa(er),lr=ye?ye.prototype:i,fr=lr?lr.valueOf:i,pr=lr?lr.toString:i;function dr(t){if(Ss(t)&&!vs(t)&&!(t instanceof vr)){if(t instanceof gr)return t;if(le.call(t,"__wrapped__"))return pa(t)}return new gr(t)}var hr=function(){function t(){}return function(e){if(!Ts(e))return{};if(Le)return Le(e);t.prototype=e;var n=new t;return t.prototype=i,n}}();function mr(){}function gr(t,e){this.__wrapped__=t,this.__actions__=[],this.__chain__=!!e,this.__index__=0,this.__values__=i}function vr(t){this.__wrapped__=t,this.__actions__=[],this.__dir__=1,this.__filtered__=!1,this.__iteratees__=[],this.__takeCount__=j,this.__views__=[]}function br(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}function _r(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}function yr(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}function Er(t){var e=-1,n=null==t?0:t.length;for(this.__data__=new yr;++e<n;)this.add(t[e])}function kr(t){var e=this.__data__=new _r(t);this.size=e.size}function xr(t,e){var n=vs(t),r=!n&&gs(t),o=!n&&!r&&Es(t),i=!n&&!r&&!o&&Ps(t),a=n||r||o||i,s=a?gn(t.length,re):[],c=s.length;for(var u in t)!e&&!le.call(t,u)||a&&("length"==u||o&&("offset"==u||"parent"==u)||i&&("buffer"==u||"byteLength"==u||"byteOffset"==u)||Vi(u,c))||s.push(u);return s}function wr(t){var e=t.length;return e?t[ko(0,e-1)]:i}function Cr(t,e){return ca(ri(t),Dr(e,0,t.length))}function Ar(t){return ca(ri(t))}function Tr(t,e,n){(n===i||ds(t[e],n))&&(n!==i||e in t)||Lr(t,e,n)}function Sr(t,e,n){var r=t[e];le.call(t,e)&&ds(r,n)&&(n!==i||e in t)||Lr(t,e,n)}function Rr(t,e){for(var n=t.length;n--;)if(ds(t[n][0],e))return n;return-1}function Or(t,e,n,r){return Fr(t,function(t,o,i){e(r,t,n(t),i)}),r}function Nr(t,e){return t&&oi(e,oc(e),t)}function Lr(t,e,n){"__proto__"==e&&dn?dn(t,e,{configurable:!0,enumerable:!0,value:n,writable:!0}):t[e]=n}function Ir(t,e){for(var n=-1,o=e.length,a=r(o),s=null==t;++n<o;)a[n]=s?i:Qs(t,e[n]);return a}function Dr(t,e,n){return t==t&&(n!==i&&(t=t<=n?t:n),e!==i&&(t=t>=e?t:e)),t}function Mr(t,e,n,r,o,a){var s,c=e&p,u=e&d,l=e&h;if(n&&(s=o?n(t,r,o,a):n(t)),s!==i)return s;if(!Ts(t))return t;var f=vs(t);if(f){if(s=function(t){var e=t.length,n=new t.constructor(e);return e&&"string"==typeof t[0]&&le.call(t,"index")&&(n.index=t.index,n.input=t.input),n}(t),!c)return ri(t,s)}else{var m=zi(t),g=m==Y||m==K;if(Es(t))return Zo(t,c);if(m==Q||m==B||g&&!o){if(s=u||g?{}:Hi(t),!c)return u?function(t,e){return oi(t,Bi(t),e)}(t,function(t,e){return t&&oi(e,ic(e),t)}(s,t)):function(t,e){return oi(t,$i(t),e)}(t,Nr(s,t))}else{if(!Te[m])return o?t:{};s=function(t,e,n){var r,o=t.constructor;switch(e){case ct:return Jo(t);case H:case G:return new o(+t);case ut:return function(t,e){var n=e?Jo(t.buffer):t.buffer;return new t.constructor(n,t.byteOffset,t.byteLength)}(t,n);case lt:case ft:case pt:case dt:case ht:case mt:case gt:case vt:case bt:return Qo(t,n);case X:return new o;case Z:case rt:return new o(t);case et:return function(t){var e=new t.constructor(t.source,qt.exec(t));return e.lastIndex=t.lastIndex,e}(t);case nt:return new o;case ot:return r=t,fr?ee(fr.call(r)):{}}}(t,m,c)}}a||(a=new kr);var v=a.get(t);if(v)return v;a.set(t,s),Is(t)?t.forEach(function(r){s.add(Mr(r,e,n,r,t,a))}):Rs(t)&&t.forEach(function(r,o){s.set(o,Mr(r,e,n,o,t,a))});var b=f?i:(l?u?Li:Ni:u?ic:oc)(t);return We(b||t,function(r,o){b&&(r=t[o=r]),Sr(s,o,Mr(r,e,n,o,t,a))}),s}function Pr(t,e,n){var r=n.length;if(null==t)return!r;for(t=ee(t);r--;){var o=n[r],a=e[o],s=t[o];if(s===i&&!(o in t)||!a(s))return!1}return!0}function jr(t,e,n){if("function"!=typeof t)throw new oe(c);return oa(function(){t.apply(i,n)},e)}function Ur(t,e,n,r){var o=-1,i=Ze,s=!0,c=t.length,u=[],l=e.length;if(!c)return u;n&&(e=Qe(e,vn(n))),r?(i=Je,s=!1):e.length>=a&&(i=_n,s=!1,e=new Er(e));t:for(;++o<c;){var f=t[o],p=null==n?f:n(f);if(f=r||0!==f?f:0,s&&p==p){for(var d=l;d--;)if(e[d]===p)continue t;u.push(f)}else i(e,p,r)||u.push(f)}return u}dr.templateSettings={escape:At,evaluate:Tt,interpolate:St,variable:"",imports:{_:dr}},dr.prototype=mr.prototype,dr.prototype.constructor=dr,gr.prototype=hr(mr.prototype),gr.prototype.constructor=gr,vr.prototype=hr(mr.prototype),vr.prototype.constructor=vr,br.prototype.clear=function(){this.__data__=nr?nr(null):{},this.size=0},br.prototype.delete=function(t){var e=this.has(t)&&delete this.__data__[t];return this.size-=e?1:0,e},br.prototype.get=function(t){var e=this.__data__;if(nr){var n=e[t];return n===u?i:n}return le.call(e,t)?e[t]:i},br.prototype.has=function(t){var e=this.__data__;return nr?e[t]!==i:le.call(e,t)},br.prototype.set=function(t,e){var n=this.__data__;return this.size+=this.has(t)?0:1,n[t]=nr&&e===i?u:e,this},_r.prototype.clear=function(){this.__data__=[],this.size=0},_r.prototype.delete=function(t){var e=this.__data__,n=Rr(e,t);return!(n<0||(n==e.length-1?e.pop():Me.call(e,n,1),--this.size,0))},_r.prototype.get=function(t){var e=this.__data__,n=Rr(e,t);return n<0?i:e[n][1]},_r.prototype.has=function(t){return Rr(this.__data__,t)>-1},_r.prototype.set=function(t,e){var n=this.__data__,r=Rr(n,t);return r<0?(++this.size,n.push([t,e])):n[r][1]=e,this},yr.prototype.clear=function(){this.size=0,this.__data__={hash:new br,map:new(Jn||_r),string:new br}},yr.prototype.delete=function(t){var e=ji(this,t).delete(t);return this.size-=e?1:0,e},yr.prototype.get=function(t){return ji(this,t).get(t)},yr.prototype.has=function(t){return ji(this,t).has(t)},yr.prototype.set=function(t,e){var n=ji(this,t),r=n.size;return n.set(t,e),this.size+=n.size==r?0:1,this},Er.prototype.add=Er.prototype.push=function(t){return this.__data__.set(t,u),this},Er.prototype.has=function(t){return this.__data__.has(t)},kr.prototype.clear=function(){this.__data__=new _r,this.size=0},kr.prototype.delete=function(t){var e=this.__data__,n=e.delete(t);return this.size=e.size,n},kr.prototype.get=function(t){return this.__data__.get(t)},kr.prototype.has=function(t){return this.__data__.has(t)},kr.prototype.set=function(t,e){var n=this.__data__;if(n instanceof _r){var r=n.__data__;if(!Jn||r.length<a-1)return r.push([t,e]),this.size=++n.size,this;n=this.__data__=new yr(r)}return n.set(t,e),this.size=n.size,this};var Fr=si(Wr),$r=si(Yr,!0);function Br(t,e){var n=!0;return Fr(t,function(t,r,o){return n=!!e(t,r,o)}),n}function zr(t,e,n){for(var r=-1,o=t.length;++r<o;){var a=t[r],s=e(a);if(null!=s&&(c===i?s==s&&!Ms(s):n(s,c)))var c=s,u=a}return u}function qr(t,e){var n=[];return Fr(t,function(t,r,o){e(t,r,o)&&n.push(t)}),n}function Hr(t,e,n,r,o){var i=-1,a=t.length;for(n||(n=Gi),o||(o=[]);++i<a;){var s=t[i];e>0&&n(s)?e>1?Hr(s,e-1,n,r,o):tn(o,s):r||(o[o.length]=s)}return o}var Gr=ci(),Vr=ci(!0);function Wr(t,e){return t&&Gr(t,e,oc)}function Yr(t,e){return t&&Vr(t,e,oc)}function Kr(t,e){return Xe(e,function(e){return ws(t[e])})}function Xr(t,e){for(var n=0,r=(e=Wo(e,t)).length;null!=t&&n<r;)t=t[la(e[n++])];return n&&n==r?t:i}function Zr(t,e,n){var r=e(t);return vs(t)?r:tn(r,n(t))}function Jr(t){return null==t?t===i?it:J:on&&on in ee(t)?function(t){var e=le.call(t,on),n=t[on];try{t[on]=i;var r=!0}catch(t){}var o=de.call(t);return r&&(e?t[on]=n:delete t[on]),o}(t):function(t){return de.call(t)}(t)}function Qr(t,e){return t>e}function to(t,e){return null!=t&&le.call(t,e)}function eo(t,e){return null!=t&&e in ee(t)}function no(t,e,n){for(var o=n?Je:Ze,a=t[0].length,s=t.length,c=s,u=r(s),l=1/0,f=[];c--;){var p=t[c];c&&e&&(p=Qe(p,vn(e))),l=Vn(p.length,l),u[c]=!n&&(e||a>=120&&p.length>=120)?new Er(c&&p):i}p=t[0];var d=-1,h=u[0];t:for(;++d<a&&f.length<l;){var m=p[d],g=e?e(m):m;if(m=n||0!==m?m:0,!(h?_n(h,g):o(f,g,n))){for(c=s;--c;){var v=u[c];if(!(v?_n(v,g):o(t[c],g,n)))continue t}h&&h.push(g),f.push(m)}}return f}function ro(t,e,n){var r=null==(t=ea(t,e=Wo(e,t)))?t:t[la(xa(e))];return null==r?i:Ge(r,t,n)}function oo(t){return Ss(t)&&Jr(t)==B}function io(t,e,n,r,o){return t===e||(null==t||null==e||!Ss(t)&&!Ss(e)?t!=t&&e!=e:function(t,e,n,r,o,a){var s=vs(t),c=vs(e),u=s?z:zi(t),l=c?z:zi(e),f=(u=u==B?Q:u)==Q,p=(l=l==B?Q:l)==Q,d=u==l;if(d&&Es(t)){if(!Es(e))return!1;s=!0,f=!1}if(d&&!f)return a||(a=new kr),s||Ps(t)?Ri(t,e,n,r,o,a):function(t,e,n,r,o,i,a){switch(n){case ut:if(t.byteLength!=e.byteLength||t.byteOffset!=e.byteOffset)return!1;t=t.buffer,e=e.buffer;case ct:return!(t.byteLength!=e.byteLength||!i(new ke(t),new ke(e)));case H:case G:case Z:return ds(+t,+e);case W:return t.name==e.name&&t.message==e.message;case et:case rt:return t==e+"";case X:var s=An;case nt:var c=r&m;if(s||(s=Rn),t.size!=e.size&&!c)return!1;var u=a.get(t);if(u)return u==e;r|=g,a.set(t,e);var l=Ri(s(t),s(e),r,o,i,a);return a.delete(t),l;case ot:if(fr)return fr.call(t)==fr.call(e)}return!1}(t,e,u,n,r,o,a);if(!(n&m)){var h=f&&le.call(t,"__wrapped__"),v=p&&le.call(e,"__wrapped__");if(h||v){var b=h?t.value():t,_=v?e.value():e;return a||(a=new kr),o(b,_,n,r,a)}}return!!d&&(a||(a=new kr),function(t,e,n,r,o,a){var s=n&m,c=Ni(t),u=c.length,l=Ni(e).length;if(u!=l&&!s)return!1;for(var f=u;f--;){var p=c[f];if(!(s?p in e:le.call(e,p)))return!1}var d=a.get(t);if(d&&a.get(e))return d==e;var h=!0;a.set(t,e),a.set(e,t);for(var g=s;++f<u;){p=c[f];var v=t[p],b=e[p];if(r)var _=s?r(b,v,p,e,t,a):r(v,b,p,t,e,a);if(!(_===i?v===b||o(v,b,n,r,a):_)){h=!1;break}g||(g="constructor"==p)}if(h&&!g){var y=t.constructor,E=e.constructor;y!=E&&"constructor"in t&&"constructor"in e&&!("function"==typeof y&&y instanceof y&&"function"==typeof E&&E instanceof E)&&(h=!1)}return a.delete(t),a.delete(e),h}(t,e,n,r,o,a))}(t,e,n,r,io,o))}function ao(t,e,n,r){var o=n.length,a=o,s=!r;if(null==t)return!a;for(t=ee(t);o--;){var c=n[o];if(s&&c[2]?c[1]!==t[c[0]]:!(c[0]in t))return!1}for(;++o<a;){var u=(c=n[o])[0],l=t[u],f=c[1];if(s&&c[2]){if(l===i&&!(u in t))return!1}else{var p=new kr;if(r)var d=r(l,f,u,t,e,p);if(!(d===i?io(f,l,m|g,r,p):d))return!1}}return!0}function so(t){return!(!Ts(t)||(e=t,pe&&pe in e))&&(ws(t)?ge:Vt).test(fa(t));var e}function co(t){return"function"==typeof t?t:null==t?Oc:"object"==typeof t?vs(t)?mo(t[0],t[1]):ho(t):Fc(t)}function uo(t){if(!Zi(t))return Hn(t);var e=[];for(var n in ee(t))le.call(t,n)&&"constructor"!=n&&e.push(n);return e}function lo(t){if(!Ts(t))return function(t){var e=[];if(null!=t)for(var n in ee(t))e.push(n);return e}(t);var e=Zi(t),n=[];for(var r in t)("constructor"!=r||!e&&le.call(t,r))&&n.push(r);return n}function fo(t,e){return t<e}function po(t,e){var n=-1,o=_s(t)?r(t.length):[];return Fr(t,function(t,r,i){o[++n]=e(t,r,i)}),o}function ho(t){var e=Ui(t);return 1==e.length&&e[0][2]?Qi(e[0][0],e[0][1]):function(n){return n===t||ao(n,t,e)}}function mo(t,e){return Yi(t)&&Ji(e)?Qi(la(t),e):function(n){var r=Qs(n,t);return r===i&&r===e?tc(n,t):io(e,r,m|g)}}function go(t,e,n,r,o){t!==e&&Gr(e,function(a,s){if(o||(o=new kr),Ts(a))!function(t,e,n,r,o,a,s){var c=na(t,n),u=na(e,n),l=s.get(u);if(l)Tr(t,n,l);else{var f=a?a(c,u,n+"",t,e,s):i,p=f===i;if(p){var d=vs(u),h=!d&&Es(u),m=!d&&!h&&Ps(u);f=u,d||h||m?vs(c)?f=c:ys(c)?f=ri(c):h?(p=!1,f=Zo(u,!0)):m?(p=!1,f=Qo(u,!0)):f=[]:Ns(u)||gs(u)?(f=c,gs(c)?f=Hs(c):Ts(c)&&!ws(c)||(f=Hi(u))):p=!1}p&&(s.set(u,f),o(f,u,r,a,s),s.delete(u)),Tr(t,n,f)}}(t,e,s,n,go,r,o);else{var c=r?r(na(t,s),a,s+"",t,e,o):i;c===i&&(c=a),Tr(t,s,c)}},ic)}function vo(t,e){var n=t.length;if(n)return Vi(e+=e<0?n:0,n)?t[e]:i}function bo(t,e,n){var r=-1;return e=Qe(e.length?e:[Oc],vn(Pi())),function(t,e){var n=t.length;for(t.sort(e);n--;)t[n]=t[n].value;return t}(po(t,function(t,n,o){return{criteria:Qe(e,function(e){return e(t)}),index:++r,value:t}}),function(t,e){return function(t,e,n){for(var r=-1,o=t.criteria,i=e.criteria,a=o.length,s=n.length;++r<a;){var c=ti(o[r],i[r]);if(c){if(r>=s)return c;var u=n[r];return c*("desc"==u?-1:1)}}return t.index-e.index}(t,e,n)})}function _o(t,e,n){for(var r=-1,o=e.length,i={};++r<o;){var a=e[r],s=Xr(t,a);n(s,a)&&To(i,Wo(a,t),s)}return i}function yo(t,e,n,r){var o=r?un:cn,i=-1,a=e.length,s=t;for(t===e&&(e=ri(e)),n&&(s=Qe(t,vn(n)));++i<a;)for(var c=0,u=e[i],l=n?n(u):u;(c=o(s,l,c,r))>-1;)s!==t&&Me.call(s,c,1),Me.call(t,c,1);return t}function Eo(t,e){for(var n=t?e.length:0,r=n-1;n--;){var o=e[n];if(n==r||o!==i){var i=o;Vi(o)?Me.call(t,o,1):Fo(t,o)}}return t}function ko(t,e){return t+Fn(Kn()*(e-t+1))}function xo(t,e){var n="";if(!t||e<1||e>D)return n;do{e%2&&(n+=t),(e=Fn(e/2))&&(t+=t)}while(e);return n}function wo(t,e){return ia(ta(t,e,Oc),t+"")}function Co(t){return wr(dc(t))}function Ao(t,e){var n=dc(t);return ca(n,Dr(e,0,n.length))}function To(t,e,n,r){if(!Ts(t))return t;for(var o=-1,a=(e=Wo(e,t)).length,s=a-1,c=t;null!=c&&++o<a;){var u=la(e[o]),l=n;if(o!=s){var f=c[u];(l=r?r(f,u,c):i)===i&&(l=Ts(f)?f:Vi(e[o+1])?[]:{})}Sr(c,u,l),c=c[u]}return t}var So=rr?function(t,e){return rr.set(t,e),t}:Oc,Ro=dn?function(t,e){return dn(t,"toString",{configurable:!0,enumerable:!1,value:Tc(e),writable:!0})}:Oc;function Oo(t){return ca(dc(t))}function No(t,e,n){var o=-1,i=t.length;e<0&&(e=-e>i?0:i+e),(n=n>i?i:n)<0&&(n+=i),i=e>n?0:n-e>>>0,e>>>=0;for(var a=r(i);++o<i;)a[o]=t[o+e];return a}function Lo(t,e){var n;return Fr(t,function(t,r,o){return!(n=e(t,r,o))}),!!n}function Io(t,e,n){var r=0,o=null==t?r:t.length;if("number"==typeof e&&e==e&&o<=F){for(;r<o;){var i=r+o>>>1,a=t[i];null!==a&&!Ms(a)&&(n?a<=e:a<e)?r=i+1:o=i}return o}return Do(t,e,Oc,n)}function Do(t,e,n,r){e=n(e);for(var o=0,a=null==t?0:t.length,s=e!=e,c=null===e,u=Ms(e),l=e===i;o<a;){var f=Fn((o+a)/2),p=n(t[f]),d=p!==i,h=null===p,m=p==p,g=Ms(p);if(s)var v=r||m;else v=l?m&&(r||d):c?m&&d&&(r||!h):u?m&&d&&!h&&(r||!g):!h&&!g&&(r?p<=e:p<e);v?o=f+1:a=f}return Vn(a,U)}function Mo(t,e){for(var n=-1,r=t.length,o=0,i=[];++n<r;){var a=t[n],s=e?e(a):a;if(!n||!ds(s,c)){var c=s;i[o++]=0===a?0:a}}return i}function Po(t){return"number"==typeof t?t:Ms(t)?P:+t}function jo(t){if("string"==typeof t)return t;if(vs(t))return Qe(t,jo)+"";if(Ms(t))return pr?pr.call(t):"";var e=t+"";return"0"==e&&1/t==-I?"-0":e}function Uo(t,e,n){var r=-1,o=Ze,i=t.length,s=!0,c=[],u=c;if(n)s=!1,o=Je;else if(i>=a){var l=e?null:xi(t);if(l)return Rn(l);s=!1,o=_n,u=new Er}else u=e?[]:c;t:for(;++r<i;){var f=t[r],p=e?e(f):f;if(f=n||0!==f?f:0,s&&p==p){for(var d=u.length;d--;)if(u[d]===p)continue t;e&&u.push(p),c.push(f)}else o(u,p,n)||(u!==c&&u.push(p),c.push(f))}return c}function Fo(t,e){return null==(t=ea(t,e=Wo(e,t)))||delete t[la(xa(e))]}function $o(t,e,n,r){return To(t,e,n(Xr(t,e)),r)}function Bo(t,e,n,r){for(var o=t.length,i=r?o:-1;(r?i--:++i<o)&&e(t[i],i,t););return n?No(t,r?0:i,r?i+1:o):No(t,r?i+1:0,r?o:i)}function zo(t,e){var n=t;return n instanceof vr&&(n=n.value()),en(e,function(t,e){return e.func.apply(e.thisArg,tn([t],e.args))},n)}function qo(t,e,n){var o=t.length;if(o<2)return o?Uo(t[0]):[];for(var i=-1,a=r(o);++i<o;)for(var s=t[i],c=-1;++c<o;)c!=i&&(a[i]=Ur(a[i]||s,t[c],e,n));return Uo(Hr(a,1),e,n)}function Ho(t,e,n){for(var r=-1,o=t.length,a=e.length,s={};++r<o;){var c=r<a?e[r]:i;n(s,t[r],c)}return s}function Go(t){return ys(t)?t:[]}function Vo(t){return"function"==typeof t?t:Oc}function Wo(t,e){return vs(t)?t:Yi(t,e)?[t]:ua(Gs(t))}var Yo=wo;function Ko(t,e,n){var r=t.length;return n=n===i?r:n,!e&&n>=r?t:No(t,e,n)}var Xo=Mn||function(t){return Ie.clearTimeout(t)};function Zo(t,e){if(e)return t.slice();var n=t.length,r=Se?Se(n):new t.constructor(n);return t.copy(r),r}function Jo(t){var e=new t.constructor(t.byteLength);return new ke(e).set(new ke(t)),e}function Qo(t,e){var n=e?Jo(t.buffer):t.buffer;return new t.constructor(n,t.byteOffset,t.length)}function ti(t,e){if(t!==e){var n=t!==i,r=null===t,o=t==t,a=Ms(t),s=e!==i,c=null===e,u=e==e,l=Ms(e);if(!c&&!l&&!a&&t>e||a&&s&&u&&!c&&!l||r&&s&&u||!n&&u||!o)return 1;if(!r&&!a&&!l&&t<e||l&&n&&o&&!r&&!a||c&&n&&o||!s&&o||!u)return-1}return 0}function ei(t,e,n,o){for(var i=-1,a=t.length,s=n.length,c=-1,u=e.length,l=Gn(a-s,0),f=r(u+l),p=!o;++c<u;)f[c]=e[c];for(;++i<s;)(p||i<a)&&(f[n[i]]=t[i]);for(;l--;)f[c++]=t[i++];return f}function ni(t,e,n,o){for(var i=-1,a=t.length,s=-1,c=n.length,u=-1,l=e.length,f=Gn(a-c,0),p=r(f+l),d=!o;++i<f;)p[i]=t[i];for(var h=i;++u<l;)p[h+u]=e[u];for(;++s<c;)(d||i<a)&&(p[h+n[s]]=t[i++]);return p}function ri(t,e){var n=-1,o=t.length;for(e||(e=r(o));++n<o;)e[n]=t[n];return e}function oi(t,e,n,r){var o=!n;n||(n={});for(var a=-1,s=e.length;++a<s;){var c=e[a],u=r?r(n[c],t[c],c,n,t):i;u===i&&(u=t[c]),o?Lr(n,c,u):Sr(n,c,u)}return n}function ii(t,e){return function(n,r){var o=vs(n)?Ve:Or,i=e?e():{};return o(n,t,Pi(r,2),i)}}function ai(t){return wo(function(e,n){var r=-1,o=n.length,a=o>1?n[o-1]:i,s=o>2?n[2]:i;for(a=t.length>3&&"function"==typeof a?(o--,a):i,s&&Wi(n[0],n[1],s)&&(a=o<3?i:a,o=1),e=ee(e);++r<o;){var c=n[r];c&&t(e,c,r,a)}return e})}function si(t,e){return function(n,r){if(null==n)return n;if(!_s(n))return t(n,r);for(var o=n.length,i=e?o:-1,a=ee(n);(e?i--:++i<o)&&!1!==r(a[i],i,a););return n}}function ci(t){return function(e,n,r){for(var o=-1,i=ee(e),a=r(e),s=a.length;s--;){var c=a[t?s:++o];if(!1===n(i[c],c,i))break}return e}}function ui(t){return function(e){var n=Cn(e=Gs(e))?Ln(e):i,r=n?n[0]:e.charAt(0),o=n?Ko(n,1).join(""):e.slice(1);return r[t]()+o}}function li(t){return function(e){return en(wc(gc(e).replace(be,"")),t,"")}}function fi(t){return function(){var e=arguments;switch(e.length){case 0:return new t;case 1:return new t(e[0]);case 2:return new t(e[0],e[1]);case 3:return new t(e[0],e[1],e[2]);case 4:return new t(e[0],e[1],e[2],e[3]);case 5:return new t(e[0],e[1],e[2],e[3],e[4]);case 6:return new t(e[0],e[1],e[2],e[3],e[4],e[5]);case 7:return new t(e[0],e[1],e[2],e[3],e[4],e[5],e[6])}var n=hr(t.prototype),r=t.apply(n,e);return Ts(r)?r:n}}function pi(t){return function(e,n,r){var o=ee(e);if(!_s(e)){var a=Pi(n,3);e=oc(e),n=function(t){return a(o[t],t,o)}}var s=t(e,n,r);return s>-1?o[a?e[s]:s]:i}}function di(t){return Oi(function(e){var n=e.length,r=n,o=gr.prototype.thru;for(t&&e.reverse();r--;){var a=e[r];if("function"!=typeof a)throw new oe(c);if(o&&!s&&"wrapper"==Di(a))var s=new gr([],!0)}for(r=s?r:n;++r<n;){var u=Di(a=e[r]),l="wrapper"==u?Ii(a):i;s=l&&Ki(l[0])&&l[1]==(w|y|k|C)&&!l[4].length&&1==l[9]?s[Di(l[0])].apply(s,l[3]):1==a.length&&Ki(a)?s[u]():s.thru(a)}return function(){var t=arguments,r=t[0];if(s&&1==t.length&&vs(r))return s.plant(r).value();for(var o=0,i=n?e[o].apply(this,t):r;++o<n;)i=e[o].call(this,i);return i}})}function hi(t,e,n,o,a,s,c,u,l,f){var p=e&w,d=e&v,h=e&b,m=e&(y|E),g=e&A,_=h?i:fi(t);return function v(){for(var b=arguments.length,y=r(b),E=b;E--;)y[E]=arguments[E];if(m)var k=Mi(v),x=function(t,e){for(var n=t.length,r=0;n--;)t[n]===e&&++r;return r}(y,k);if(o&&(y=ei(y,o,a,m)),s&&(y=ni(y,s,c,m)),b-=x,m&&b<f){var w=Sn(y,k);return Ei(t,e,hi,v.placeholder,n,y,w,u,l,f-b)}var C=d?n:this,A=h?C[t]:t;return b=y.length,u?y=function(t,e){for(var n=t.length,r=Vn(e.length,n),o=ri(t);r--;){var a=e[r];t[r]=Vi(a,n)?o[a]:i}return t}(y,u):g&&b>1&&y.reverse(),p&&l<b&&(y.length=l),this&&this!==Ie&&this instanceof v&&(A=_||fi(A)),A.apply(C,y)}}function mi(t,e){return function(n,r){return function(t,e,n,r){return Wr(t,function(t,o,i){e(r,n(t),o,i)}),r}(n,t,e(r),{})}}function gi(t,e){return function(n,r){var o;if(n===i&&r===i)return e;if(n!==i&&(o=n),r!==i){if(o===i)return r;"string"==typeof n||"string"==typeof r?(n=jo(n),r=jo(r)):(n=Po(n),r=Po(r)),o=t(n,r)}return o}}function vi(t){return Oi(function(e){return e=Qe(e,vn(Pi())),wo(function(n){var r=this;return t(e,function(t){return Ge(t,r,n)})})})}function bi(t,e){var n=(e=e===i?" ":jo(e)).length;if(n<2)return n?xo(e,t):e;var r=xo(e,Un(t/Nn(e)));return Cn(e)?Ko(Ln(r),0,t).join(""):r.slice(0,t)}function _i(t){return function(e,n,o){return o&&"number"!=typeof o&&Wi(e,n,o)&&(n=o=i),e=$s(e),n===i?(n=e,e=0):n=$s(n),function(t,e,n,o){for(var i=-1,a=Gn(Un((e-t)/(n||1)),0),s=r(a);a--;)s[o?a:++i]=t,t+=n;return s}(e,n,o=o===i?e<n?1:-1:$s(o),t)}}function yi(t){return function(e,n){return"string"==typeof e&&"string"==typeof n||(e=qs(e),n=qs(n)),t(e,n)}}function Ei(t,e,n,r,o,a,s,c,u,l){var f=e&y;e|=f?k:x,(e&=~(f?x:k))&_||(e&=~(v|b));var p=[t,e,o,f?a:i,f?s:i,f?i:a,f?i:s,c,u,l],d=n.apply(i,p);return Ki(t)&&ra(d,p),d.placeholder=r,aa(d,t,e)}function ki(t){var e=te[t];return function(t,n){if(t=qs(t),(n=null==n?0:Vn(Bs(n),292))&&zn(t)){var r=(Gs(t)+"e").split("e");return+((r=(Gs(e(r[0]+"e"+(+r[1]+n)))+"e").split("e"))[0]+"e"+(+r[1]-n))}return e(t)}}var xi=tr&&1/Rn(new tr([,-0]))[1]==I?function(t){return new tr(t)}:Mc;function wi(t){return function(e){var n=zi(e);return n==X?An(e):n==nt?On(e):function(t,e){return Qe(e,function(e){return[e,t[e]]})}(e,t(e))}}function Ci(t,e,n,o,a,s,u,l){var p=e&b;if(!p&&"function"!=typeof t)throw new oe(c);var d=o?o.length:0;if(d||(e&=~(k|x),o=a=i),u=u===i?u:Gn(Bs(u),0),l=l===i?l:Bs(l),d-=a?a.length:0,e&x){var h=o,m=a;o=a=i}var g=p?i:Ii(t),A=[t,e,n,o,a,h,m,s,u,l];if(g&&function(t,e){var n=t[1],r=e[1],o=n|r,i=o<(v|b|w),a=r==w&&n==y||r==w&&n==C&&t[7].length<=e[8]||r==(w|C)&&e[7].length<=e[8]&&n==y;if(!i&&!a)return t;r&v&&(t[2]=e[2],o|=n&v?0:_);var s=e[3];if(s){var c=t[3];t[3]=c?ei(c,s,e[4]):s,t[4]=c?Sn(t[3],f):e[4]}(s=e[5])&&(c=t[5],t[5]=c?ni(c,s,e[6]):s,t[6]=c?Sn(t[5],f):e[6]),(s=e[7])&&(t[7]=s),r&w&&(t[8]=null==t[8]?e[8]:Vn(t[8],e[8])),null==t[9]&&(t[9]=e[9]),t[0]=e[0],t[1]=o}(A,g),t=A[0],e=A[1],n=A[2],o=A[3],a=A[4],!(l=A[9]=A[9]===i?p?0:t.length:Gn(A[9]-d,0))&&e&(y|E)&&(e&=~(y|E)),e&&e!=v)T=e==y||e==E?function(t,e,n){var o=fi(t);return function a(){for(var s=arguments.length,c=r(s),u=s,l=Mi(a);u--;)c[u]=arguments[u];var f=s<3&&c[0]!==l&&c[s-1]!==l?[]:Sn(c,l);return(s-=f.length)<n?Ei(t,e,hi,a.placeholder,i,c,f,i,i,n-s):Ge(this&&this!==Ie&&this instanceof a?o:t,this,c)}}(t,e,l):e!=k&&e!=(v|k)||a.length?hi.apply(i,A):function(t,e,n,o){var i=e&v,a=fi(t);return function e(){for(var s=-1,c=arguments.length,u=-1,l=o.length,f=r(l+c),p=this&&this!==Ie&&this instanceof e?a:t;++u<l;)f[u]=o[u];for(;c--;)f[u++]=arguments[++s];return Ge(p,i?n:this,f)}}(t,e,n,o);else var T=function(t,e,n){var r=e&v,o=fi(t);return function e(){return(this&&this!==Ie&&this instanceof e?o:t).apply(r?n:this,arguments)}}(t,e,n);return aa((g?So:ra)(T,A),t,e)}function Ai(t,e,n,r){return t===i||ds(t,se[n])&&!le.call(r,n)?e:t}function Ti(t,e,n,r,o,a){return Ts(t)&&Ts(e)&&(a.set(e,t),go(t,e,i,Ti,a),a.delete(e)),t}function Si(t){return Ns(t)?i:t}function Ri(t,e,n,r,o,a){var s=n&m,c=t.length,u=e.length;if(c!=u&&!(s&&u>c))return!1;var l=a.get(t);if(l&&a.get(e))return l==e;var f=-1,p=!0,d=n&g?new Er:i;for(a.set(t,e),a.set(e,t);++f<c;){var h=t[f],v=e[f];if(r)var b=s?r(v,h,f,e,t,a):r(h,v,f,t,e,a);if(b!==i){if(b)continue;p=!1;break}if(d){if(!rn(e,function(t,e){if(!_n(d,e)&&(h===t||o(h,t,n,r,a)))return d.push(e)})){p=!1;break}}else if(h!==v&&!o(h,v,n,r,a)){p=!1;break}}return a.delete(t),a.delete(e),p}function Oi(t){return ia(ta(t,i,ba),t+"")}function Ni(t){return Zr(t,oc,$i)}function Li(t){return Zr(t,ic,Bi)}var Ii=rr?function(t){return rr.get(t)}:Mc;function Di(t){for(var e=t.name+"",n=or[e],r=le.call(or,e)?n.length:0;r--;){var o=n[r],i=o.func;if(null==i||i==t)return o.name}return e}function Mi(t){return(le.call(dr,"placeholder")?dr:t).placeholder}function Pi(){var t=dr.iteratee||Nc;return t=t===Nc?co:t,arguments.length?t(arguments[0],arguments[1]):t}function ji(t,e){var n,r,o=t.__data__;return("string"==(r=typeof(n=e))||"number"==r||"symbol"==r||"boolean"==r?"__proto__"!==n:null===n)?o["string"==typeof e?"string":"hash"]:o.map}function Ui(t){for(var e=oc(t),n=e.length;n--;){var r=e[n],o=t[r];e[n]=[r,o,Ji(o)]}return e}function Fi(t,e){var n=function(t,e){return null==t?i:t[e]}(t,e);return so(n)?n:i}var $i=$n?function(t){return null==t?[]:(t=ee(t),Xe($n(t),function(e){return De.call(t,e)}))}:zc,Bi=$n?function(t){for(var e=[];t;)tn(e,$i(t)),t=Ne(t);return e}:zc,zi=Jr;function qi(t,e,n){for(var r=-1,o=(e=Wo(e,t)).length,i=!1;++r<o;){var a=la(e[r]);if(!(i=null!=t&&n(t,a)))break;t=t[a]}return i||++r!=o?i:!!(o=null==t?0:t.length)&&As(o)&&Vi(a,o)&&(vs(t)||gs(t))}function Hi(t){return"function"!=typeof t.constructor||Zi(t)?{}:hr(Ne(t))}function Gi(t){return vs(t)||gs(t)||!!(je&&t&&t[je])}function Vi(t,e){var n=typeof t;return!!(e=null==e?D:e)&&("number"==n||"symbol"!=n&&Yt.test(t))&&t>-1&&t%1==0&&t<e}function Wi(t,e,n){if(!Ts(n))return!1;var r=typeof e;return!!("number"==r?_s(n)&&Vi(e,n.length):"string"==r&&e in n)&&ds(n[e],t)}function Yi(t,e){if(vs(t))return!1;var n=typeof t;return!("number"!=n&&"symbol"!=n&&"boolean"!=n&&null!=t&&!Ms(t))||Ot.test(t)||!Rt.test(t)||null!=e&&t in ee(e)}function Ki(t){var e=Di(t),n=dr[e];if("function"!=typeof n||!(e in vr.prototype))return!1;if(t===n)return!0;var r=Ii(n);return!!r&&t===r[0]}(Zn&&zi(new Zn(new ArrayBuffer(1)))!=ut||Jn&&zi(new Jn)!=X||Qn&&"[object Promise]"!=zi(Qn.resolve())||tr&&zi(new tr)!=nt||er&&zi(new er)!=at)&&(zi=function(t){var e=Jr(t),n=e==Q?t.constructor:i,r=n?fa(n):"";if(r)switch(r){case ir:return ut;case ar:return X;case sr:return"[object Promise]";case cr:return nt;case ur:return at}return e});var Xi=ce?ws:qc;function Zi(t){var e=t&&t.constructor;return t===("function"==typeof e&&e.prototype||se)}function Ji(t){return t==t&&!Ts(t)}function Qi(t,e){return function(n){return null!=n&&n[t]===e&&(e!==i||t in ee(n))}}function ta(t,e,n){return e=Gn(e===i?t.length-1:e,0),function(){for(var o=arguments,i=-1,a=Gn(o.length-e,0),s=r(a);++i<a;)s[i]=o[e+i];i=-1;for(var c=r(e+1);++i<e;)c[i]=o[i];return c[e]=n(s),Ge(t,this,c)}}function ea(t,e){return e.length<2?t:Xr(t,No(e,0,-1))}function na(t,e){if(("constructor"!==e||"function"!=typeof t[e])&&"__proto__"!=e)return t[e]}var ra=sa(So),oa=jn||function(t,e){return Ie.setTimeout(t,e)},ia=sa(Ro);function aa(t,e,n){var r=e+"";return ia(t,function(t,e){var n=e.length;if(!n)return t;var r=n-1;return e[r]=(n>1?"& ":"")+e[r],e=e.join(n>2?", ":" "),t.replace(jt,"{\n/* [wrapped with "+e+"] */\n")}(r,function(t,e){return We($,function(n){var r="_."+n[0];e&n[1]&&!Ze(t,r)&&t.push(r)}),t.sort()}(function(t){var e=t.match(Ut);return e?e[1].split(Ft):[]}(r),n)))}function sa(t){var e=0,n=0;return function(){var r=Wn(),o=O-(r-n);if(n=r,o>0){if(++e>=R)return arguments[0]}else e=0;return t.apply(i,arguments)}}function ca(t,e){var n=-1,r=t.length,o=r-1;for(e=e===i?r:e;++n<e;){var a=ko(n,o),s=t[a];t[a]=t[n],t[n]=s}return t.length=e,t}var ua=function(t){var e=ss(t,function(t){return n.size===l&&n.clear(),t}),n=e.cache;return e}(function(t){var e=[];return 46===t.charCodeAt(0)&&e.push(""),t.replace(Nt,function(t,n,r,o){e.push(r?o.replace(Bt,"$1"):n||t)}),e});function la(t){if("string"==typeof t||Ms(t))return t;var e=t+"";return"0"==e&&1/t==-I?"-0":e}function fa(t){if(null!=t){try{return ue.call(t)}catch(t){}try{return t+""}catch(t){}}return""}function pa(t){if(t instanceof vr)return t.clone();var e=new gr(t.__wrapped__,t.__chain__);return e.__actions__=ri(t.__actions__),e.__index__=t.__index__,e.__values__=t.__values__,e}var da=wo(function(t,e){return ys(t)?Ur(t,Hr(e,1,ys,!0)):[]}),ha=wo(function(t,e){var n=xa(e);return ys(n)&&(n=i),ys(t)?Ur(t,Hr(e,1,ys,!0),Pi(n,2)):[]}),ma=wo(function(t,e){var n=xa(e);return ys(n)&&(n=i),ys(t)?Ur(t,Hr(e,1,ys,!0),i,n):[]});function ga(t,e,n){var r=null==t?0:t.length;if(!r)return-1;var o=null==n?0:Bs(n);return o<0&&(o=Gn(r+o,0)),sn(t,Pi(e,3),o)}function va(t,e,n){var r=null==t?0:t.length;if(!r)return-1;var o=r-1;return n!==i&&(o=Bs(n),o=n<0?Gn(r+o,0):Vn(o,r-1)),sn(t,Pi(e,3),o,!0)}function ba(t){return null!=t&&t.length?Hr(t,1):[]}function _a(t){return t&&t.length?t[0]:i}var ya=wo(function(t){var e=Qe(t,Go);return e.length&&e[0]===t[0]?no(e):[]}),Ea=wo(function(t){var e=xa(t),n=Qe(t,Go);return e===xa(n)?e=i:n.pop(),n.length&&n[0]===t[0]?no(n,Pi(e,2)):[]}),ka=wo(function(t){var e=xa(t),n=Qe(t,Go);return(e="function"==typeof e?e:i)&&n.pop(),n.length&&n[0]===t[0]?no(n,i,e):[]});function xa(t){var e=null==t?0:t.length;return e?t[e-1]:i}var wa=wo(Ca);function Ca(t,e){return t&&t.length&&e&&e.length?yo(t,e):t}var Aa=Oi(function(t,e){var n=null==t?0:t.length,r=Ir(t,e);return Eo(t,Qe(e,function(t){return Vi(t,n)?+t:t}).sort(ti)),r});function Ta(t){return null==t?t:Xn.call(t)}var Sa=wo(function(t){return Uo(Hr(t,1,ys,!0))}),Ra=wo(function(t){var e=xa(t);return ys(e)&&(e=i),Uo(Hr(t,1,ys,!0),Pi(e,2))}),Oa=wo(function(t){var e=xa(t);return e="function"==typeof e?e:i,Uo(Hr(t,1,ys,!0),i,e)});function Na(t){if(!t||!t.length)return[];var e=0;return t=Xe(t,function(t){if(ys(t))return e=Gn(t.length,e),!0}),gn(e,function(e){return Qe(t,pn(e))})}function La(t,e){if(!t||!t.length)return[];var n=Na(t);return null==e?n:Qe(n,function(t){return Ge(e,i,t)})}var Ia=wo(function(t,e){return ys(t)?Ur(t,e):[]}),Da=wo(function(t){return qo(Xe(t,ys))}),Ma=wo(function(t){var e=xa(t);return ys(e)&&(e=i),qo(Xe(t,ys),Pi(e,2))}),Pa=wo(function(t){var e=xa(t);return e="function"==typeof e?e:i,qo(Xe(t,ys),i,e)}),ja=wo(Na);var Ua=wo(function(t){var e=t.length,n=e>1?t[e-1]:i;return n="function"==typeof n?(t.pop(),n):i,La(t,n)});function Fa(t){var e=dr(t);return e.__chain__=!0,e}function $a(t,e){return e(t)}var Ba=Oi(function(t){var e=t.length,n=e?t[0]:0,r=this.__wrapped__,o=function(e){return Ir(e,t)};return!(e>1||this.__actions__.length)&&r instanceof vr&&Vi(n)?((r=r.slice(n,+n+(e?1:0))).__actions__.push({func:$a,args:[o],thisArg:i}),new gr(r,this.__chain__).thru(function(t){return e&&!t.length&&t.push(i),t})):this.thru(o)});var za=ii(function(t,e,n){le.call(t,n)?++t[n]:Lr(t,n,1)});var qa=pi(ga),Ha=pi(va);function Ga(t,e){return(vs(t)?We:Fr)(t,Pi(e,3))}function Va(t,e){return(vs(t)?Ye:$r)(t,Pi(e,3))}var Wa=ii(function(t,e,n){le.call(t,n)?t[n].push(e):Lr(t,n,[e])});var Ya=wo(function(t,e,n){var o=-1,i="function"==typeof e,a=_s(t)?r(t.length):[];return Fr(t,function(t){a[++o]=i?Ge(e,t,n):ro(t,e,n)}),a}),Ka=ii(function(t,e,n){Lr(t,n,e)});function Xa(t,e){return(vs(t)?Qe:po)(t,Pi(e,3))}var Za=ii(function(t,e,n){t[n?0:1].push(e)},function(){return[[],[]]});var Ja=wo(function(t,e){if(null==t)return[];var n=e.length;return n>1&&Wi(t,e[0],e[1])?e=[]:n>2&&Wi(e[0],e[1],e[2])&&(e=[e[0]]),bo(t,Hr(e,1),[])}),Qa=Pn||function(){return Ie.Date.now()};function ts(t,e,n){return e=n?i:e,e=t&&null==e?t.length:e,Ci(t,w,i,i,i,i,e)}function es(t,e){var n;if("function"!=typeof e)throw new oe(c);return t=Bs(t),function(){return--t>0&&(n=e.apply(this,arguments)),t<=1&&(e=i),n}}var ns=wo(function(t,e,n){var r=v;if(n.length){var o=Sn(n,Mi(ns));r|=k}return Ci(t,r,e,n,o)}),rs=wo(function(t,e,n){var r=v|b;if(n.length){var o=Sn(n,Mi(rs));r|=k}return Ci(e,r,t,n,o)});function os(t,e,n){var r,o,a,s,u,l,f=0,p=!1,d=!1,h=!0;if("function"!=typeof t)throw new oe(c);function m(e){var n=r,a=o;return r=o=i,f=e,s=t.apply(a,n)}function g(t){var n=t-l;return l===i||n>=e||n<0||d&&t-f>=a}function v(){var t=Qa();if(g(t))return b(t);u=oa(v,function(t){var n=e-(t-l);return d?Vn(n,a-(t-f)):n}(t))}function b(t){return u=i,h&&r?m(t):(r=o=i,s)}function _(){var t=Qa(),n=g(t);if(r=arguments,o=this,l=t,n){if(u===i)return function(t){return f=t,u=oa(v,e),p?m(t):s}(l);if(d)return Xo(u),u=oa(v,e),m(l)}return u===i&&(u=oa(v,e)),s}return e=qs(e)||0,Ts(n)&&(p=!!n.leading,a=(d="maxWait"in n)?Gn(qs(n.maxWait)||0,e):a,h="trailing"in n?!!n.trailing:h),_.cancel=function(){u!==i&&Xo(u),f=0,r=l=o=u=i},_.flush=function(){return u===i?s:b(Qa())},_}var is=wo(function(t,e){return jr(t,1,e)}),as=wo(function(t,e,n){return jr(t,qs(e)||0,n)});function ss(t,e){if("function"!=typeof t||null!=e&&"function"!=typeof e)throw new oe(c);var n=function(){var r=arguments,o=e?e.apply(this,r):r[0],i=n.cache;if(i.has(o))return i.get(o);var a=t.apply(this,r);return n.cache=i.set(o,a)||i,a};return n.cache=new(ss.Cache||yr),n}function cs(t){if("function"!=typeof t)throw new oe(c);return function(){var e=arguments;switch(e.length){case 0:return!t.call(this);case 1:return!t.call(this,e[0]);case 2:return!t.call(this,e[0],e[1]);case 3:return!t.call(this,e[0],e[1],e[2])}return!t.apply(this,e)}}ss.Cache=yr;var us=Yo(function(t,e){var n=(e=1==e.length&&vs(e[0])?Qe(e[0],vn(Pi())):Qe(Hr(e,1),vn(Pi()))).length;return wo(function(r){for(var o=-1,i=Vn(r.length,n);++o<i;)r[o]=e[o].call(this,r[o]);return Ge(t,this,r)})}),ls=wo(function(t,e){var n=Sn(e,Mi(ls));return Ci(t,k,i,e,n)}),fs=wo(function(t,e){var n=Sn(e,Mi(fs));return Ci(t,x,i,e,n)}),ps=Oi(function(t,e){return Ci(t,C,i,i,i,e)});function ds(t,e){return t===e||t!=t&&e!=e}var hs=yi(Qr),ms=yi(function(t,e){return t>=e}),gs=oo(function(){return arguments}())?oo:function(t){return Ss(t)&&le.call(t,"callee")&&!De.call(t,"callee")},vs=r.isArray,bs=Fe?vn(Fe):function(t){return Ss(t)&&Jr(t)==ct};function _s(t){return null!=t&&As(t.length)&&!ws(t)}function ys(t){return Ss(t)&&_s(t)}var Es=Bn||qc,ks=$e?vn($e):function(t){return Ss(t)&&Jr(t)==G};function xs(t){if(!Ss(t))return!1;var e=Jr(t);return e==W||e==V||"string"==typeof t.message&&"string"==typeof t.name&&!Ns(t)}function ws(t){if(!Ts(t))return!1;var e=Jr(t);return e==Y||e==K||e==q||e==tt}function Cs(t){return"number"==typeof t&&t==Bs(t)}function As(t){return"number"==typeof t&&t>-1&&t%1==0&&t<=D}function Ts(t){var e=typeof t;return null!=t&&("object"==e||"function"==e)}function Ss(t){return null!=t&&"object"==typeof t}var Rs=Be?vn(Be):function(t){return Ss(t)&&zi(t)==X};function Os(t){return"number"==typeof t||Ss(t)&&Jr(t)==Z}function Ns(t){if(!Ss(t)||Jr(t)!=Q)return!1;var e=Ne(t);if(null===e)return!0;var n=le.call(e,"constructor")&&e.constructor;return"function"==typeof n&&n instanceof n&&ue.call(n)==he}var Ls=ze?vn(ze):function(t){return Ss(t)&&Jr(t)==et};var Is=qe?vn(qe):function(t){return Ss(t)&&zi(t)==nt};function Ds(t){return"string"==typeof t||!vs(t)&&Ss(t)&&Jr(t)==rt}function Ms(t){return"symbol"==typeof t||Ss(t)&&Jr(t)==ot}var Ps=He?vn(He):function(t){return Ss(t)&&As(t.length)&&!!Ae[Jr(t)]};var js=yi(fo),Us=yi(function(t,e){return t<=e});function Fs(t){if(!t)return[];if(_s(t))return Ds(t)?Ln(t):ri(t);if(Ue&&t[Ue])return function(t){for(var e,n=[];!(e=t.next()).done;)n.push(e.value);return n}(t[Ue]());var e=zi(t);return(e==X?An:e==nt?Rn:dc)(t)}function $s(t){return t?(t=qs(t))===I||t===-I?(t<0?-1:1)*M:t==t?t:0:0===t?t:0}function Bs(t){var e=$s(t),n=e%1;return e==e?n?e-n:e:0}function zs(t){return t?Dr(Bs(t),0,j):0}function qs(t){if("number"==typeof t)return t;if(Ms(t))return P;if(Ts(t)){var e="function"==typeof t.valueOf?t.valueOf():t;t=Ts(e)?e+"":e}if("string"!=typeof t)return 0===t?t:+t;t=t.replace(Dt,"");var n=Gt.test(t);return n||Wt.test(t)?Oe(t.slice(2),n?2:8):Ht.test(t)?P:+t}function Hs(t){return oi(t,ic(t))}function Gs(t){return null==t?"":jo(t)}var Vs=ai(function(t,e){if(Zi(e)||_s(e))oi(e,oc(e),t);else for(var n in e)le.call(e,n)&&Sr(t,n,e[n])}),Ws=ai(function(t,e){oi(e,ic(e),t)}),Ys=ai(function(t,e,n,r){oi(e,ic(e),t,r)}),Ks=ai(function(t,e,n,r){oi(e,oc(e),t,r)}),Xs=Oi(Ir);var Zs=wo(function(t,e){t=ee(t);var n=-1,r=e.length,o=r>2?e[2]:i;for(o&&Wi(e[0],e[1],o)&&(r=1);++n<r;)for(var a=e[n],s=ic(a),c=-1,u=s.length;++c<u;){var l=s[c],f=t[l];(f===i||ds(f,se[l])&&!le.call(t,l))&&(t[l]=a[l])}return t}),Js=wo(function(t){return t.push(i,Ti),Ge(sc,i,t)});function Qs(t,e,n){var r=null==t?i:Xr(t,e);return r===i?n:r}function tc(t,e){return null!=t&&qi(t,e,eo)}var ec=mi(function(t,e,n){null!=e&&"function"!=typeof e.toString&&(e=de.call(e)),t[e]=n},Tc(Oc)),nc=mi(function(t,e,n){null!=e&&"function"!=typeof e.toString&&(e=de.call(e)),le.call(t,e)?t[e].push(n):t[e]=[n]},Pi),rc=wo(ro);function oc(t){return _s(t)?xr(t):uo(t)}function ic(t){return _s(t)?xr(t,!0):lo(t)}var ac=ai(function(t,e,n){go(t,e,n)}),sc=ai(function(t,e,n,r){go(t,e,n,r)}),cc=Oi(function(t,e){var n={};if(null==t)return n;var r=!1;e=Qe(e,function(e){return e=Wo(e,t),r||(r=e.length>1),e}),oi(t,Li(t),n),r&&(n=Mr(n,p|d|h,Si));for(var o=e.length;o--;)Fo(n,e[o]);return n});var uc=Oi(function(t,e){return null==t?{}:function(t,e){return _o(t,e,function(e,n){return tc(t,n)})}(t,e)});function lc(t,e){if(null==t)return{};var n=Qe(Li(t),function(t){return[t]});return e=Pi(e),_o(t,n,function(t,n){return e(t,n[0])})}var fc=wi(oc),pc=wi(ic);function dc(t){return null==t?[]:bn(t,oc(t))}var hc=li(function(t,e,n){return e=e.toLowerCase(),t+(n?mc(e):e)});function mc(t){return xc(Gs(t).toLowerCase())}function gc(t){return(t=Gs(t))&&t.replace(Kt,kn).replace(_e,"")}var vc=li(function(t,e,n){return t+(n?"-":"")+e.toLowerCase()}),bc=li(function(t,e,n){return t+(n?" ":"")+e.toLowerCase()}),_c=ui("toLowerCase");var yc=li(function(t,e,n){return t+(n?"_":"")+e.toLowerCase()});var Ec=li(function(t,e,n){return t+(n?" ":"")+xc(e)});var kc=li(function(t,e,n){return t+(n?" ":"")+e.toUpperCase()}),xc=ui("toUpperCase");function wc(t,e,n){return t=Gs(t),(e=n?i:e)===i?function(t){return xe.test(t)}(t)?function(t){return t.match(Ee)||[]}(t):function(t){return t.match($t)||[]}(t):t.match(e)||[]}var Cc=wo(function(t,e){try{return Ge(t,i,e)}catch(t){return xs(t)?t:new Jt(t)}}),Ac=Oi(function(t,e){return We(e,function(e){e=la(e),Lr(t,e,ns(t[e],t))}),t});function Tc(t){return function(){return t}}var Sc=di(),Rc=di(!0);function Oc(t){return t}function Nc(t){return co("function"==typeof t?t:Mr(t,p))}var Lc=wo(function(t,e){return function(n){return ro(n,t,e)}}),Ic=wo(function(t,e){return function(n){return ro(t,n,e)}});function Dc(t,e,n){var r=oc(e),o=Kr(e,r);null!=n||Ts(e)&&(o.length||!r.length)||(n=e,e=t,t=this,o=Kr(e,oc(e)));var i=!(Ts(n)&&"chain"in n&&!n.chain),a=ws(t);return We(o,function(n){var r=e[n];t[n]=r,a&&(t.prototype[n]=function(){var e=this.__chain__;if(i||e){var n=t(this.__wrapped__),o=n.__actions__=ri(this.__actions__);return o.push({func:r,args:arguments,thisArg:t}),n.__chain__=e,n}return r.apply(t,tn([this.value()],arguments))})}),t}function Mc(){}var Pc=vi(Qe),jc=vi(Ke),Uc=vi(rn);function Fc(t){return Yi(t)?pn(la(t)):function(t){return function(e){return Xr(e,t)}}(t)}var $c=_i(),Bc=_i(!0);function zc(){return[]}function qc(){return!1}var Hc=gi(function(t,e){return t+e},0),Gc=ki("ceil"),Vc=gi(function(t,e){return t/e},1),Wc=ki("floor");var Yc,Kc=gi(function(t,e){return t*e},1),Xc=ki("round"),Zc=gi(function(t,e){return t-e},0);return dr.after=function(t,e){if("function"!=typeof e)throw new oe(c);return t=Bs(t),function(){if(--t<1)return e.apply(this,arguments)}},dr.ary=ts,dr.assign=Vs,dr.assignIn=Ws,dr.assignInWith=Ys,dr.assignWith=Ks,dr.at=Xs,dr.before=es,dr.bind=ns,dr.bindAll=Ac,dr.bindKey=rs,dr.castArray=function(){if(!arguments.length)return[];var t=arguments[0];return vs(t)?t:[t]},dr.chain=Fa,dr.chunk=function(t,e,n){e=(n?Wi(t,e,n):e===i)?1:Gn(Bs(e),0);var o=null==t?0:t.length;if(!o||e<1)return[];for(var a=0,s=0,c=r(Un(o/e));a<o;)c[s++]=No(t,a,a+=e);return c},dr.compact=function(t){for(var e=-1,n=null==t?0:t.length,r=0,o=[];++e<n;){var i=t[e];i&&(o[r++]=i)}return o},dr.concat=function(){var t=arguments.length;if(!t)return[];for(var e=r(t-1),n=arguments[0],o=t;o--;)e[o-1]=arguments[o];return tn(vs(n)?ri(n):[n],Hr(e,1))},dr.cond=function(t){var e=null==t?0:t.length,n=Pi();return t=e?Qe(t,function(t){if("function"!=typeof t[1])throw new oe(c);return[n(t[0]),t[1]]}):[],wo(function(n){for(var r=-1;++r<e;){var o=t[r];if(Ge(o[0],this,n))return Ge(o[1],this,n)}})},dr.conforms=function(t){return function(t){var e=oc(t);return function(n){return Pr(n,t,e)}}(Mr(t,p))},dr.constant=Tc,dr.countBy=za,dr.create=function(t,e){var n=hr(t);return null==e?n:Nr(n,e)},dr.curry=function t(e,n,r){var o=Ci(e,y,i,i,i,i,i,n=r?i:n);return o.placeholder=t.placeholder,o},dr.curryRight=function t(e,n,r){var o=Ci(e,E,i,i,i,i,i,n=r?i:n);return o.placeholder=t.placeholder,o},dr.debounce=os,dr.defaults=Zs,dr.defaultsDeep=Js,dr.defer=is,dr.delay=as,dr.difference=da,dr.differenceBy=ha,dr.differenceWith=ma,dr.drop=function(t,e,n){var r=null==t?0:t.length;return r?No(t,(e=n||e===i?1:Bs(e))<0?0:e,r):[]},dr.dropRight=function(t,e,n){var r=null==t?0:t.length;return r?No(t,0,(e=r-(e=n||e===i?1:Bs(e)))<0?0:e):[]},dr.dropRightWhile=function(t,e){return t&&t.length?Bo(t,Pi(e,3),!0,!0):[]},dr.dropWhile=function(t,e){return t&&t.length?Bo(t,Pi(e,3),!0):[]},dr.fill=function(t,e,n,r){var o=null==t?0:t.length;return o?(n&&"number"!=typeof n&&Wi(t,e,n)&&(n=0,r=o),function(t,e,n,r){var o=t.length;for((n=Bs(n))<0&&(n=-n>o?0:o+n),(r=r===i||r>o?o:Bs(r))<0&&(r+=o),r=n>r?0:zs(r);n<r;)t[n++]=e;return t}(t,e,n,r)):[]},dr.filter=function(t,e){return(vs(t)?Xe:qr)(t,Pi(e,3))},dr.flatMap=function(t,e){return Hr(Xa(t,e),1)},dr.flatMapDeep=function(t,e){return Hr(Xa(t,e),I)},dr.flatMapDepth=function(t,e,n){return n=n===i?1:Bs(n),Hr(Xa(t,e),n)},dr.flatten=ba,dr.flattenDeep=function(t){return null!=t&&t.length?Hr(t,I):[]},dr.flattenDepth=function(t,e){return null!=t&&t.length?Hr(t,e=e===i?1:Bs(e)):[]},dr.flip=function(t){return Ci(t,A)},dr.flow=Sc,dr.flowRight=Rc,dr.fromPairs=function(t){for(var e=-1,n=null==t?0:t.length,r={};++e<n;){var o=t[e];r[o[0]]=o[1]}return r},dr.functions=function(t){return null==t?[]:Kr(t,oc(t))},dr.functionsIn=function(t){return null==t?[]:Kr(t,ic(t))},dr.groupBy=Wa,dr.initial=function(t){return null!=t&&t.length?No(t,0,-1):[]},dr.intersection=ya,dr.intersectionBy=Ea,dr.intersectionWith=ka,dr.invert=ec,dr.invertBy=nc,dr.invokeMap=Ya,dr.iteratee=Nc,dr.keyBy=Ka,dr.keys=oc,dr.keysIn=ic,dr.map=Xa,dr.mapKeys=function(t,e){var n={};return e=Pi(e,3),Wr(t,function(t,r,o){Lr(n,e(t,r,o),t)}),n},dr.mapValues=function(t,e){var n={};return e=Pi(e,3),Wr(t,function(t,r,o){Lr(n,r,e(t,r,o))}),n},dr.matches=function(t){return ho(Mr(t,p))},dr.matchesProperty=function(t,e){return mo(t,Mr(e,p))},dr.memoize=ss,dr.merge=ac,dr.mergeWith=sc,dr.method=Lc,dr.methodOf=Ic,dr.mixin=Dc,dr.negate=cs,dr.nthArg=function(t){return t=Bs(t),wo(function(e){return vo(e,t)})},dr.omit=cc,dr.omitBy=function(t,e){return lc(t,cs(Pi(e)))},dr.once=function(t){return es(2,t)},dr.orderBy=function(t,e,n,r){return null==t?[]:(vs(e)||(e=null==e?[]:[e]),vs(n=r?i:n)||(n=null==n?[]:[n]),bo(t,e,n))},dr.over=Pc,dr.overArgs=us,dr.overEvery=jc,dr.overSome=Uc,dr.partial=ls,dr.partialRight=fs,dr.partition=Za,dr.pick=uc,dr.pickBy=lc,dr.property=Fc,dr.propertyOf=function(t){return function(e){return null==t?i:Xr(t,e)}},dr.pull=wa,dr.pullAll=Ca,dr.pullAllBy=function(t,e,n){return t&&t.length&&e&&e.length?yo(t,e,Pi(n,2)):t},dr.pullAllWith=function(t,e,n){return t&&t.length&&e&&e.length?yo(t,e,i,n):t},dr.pullAt=Aa,dr.range=$c,dr.rangeRight=Bc,dr.rearg=ps,dr.reject=function(t,e){return(vs(t)?Xe:qr)(t,cs(Pi(e,3)))},dr.remove=function(t,e){var n=[];if(!t||!t.length)return n;var r=-1,o=[],i=t.length;for(e=Pi(e,3);++r<i;){var a=t[r];e(a,r,t)&&(n.push(a),o.push(r))}return Eo(t,o),n},dr.rest=function(t,e){if("function"!=typeof t)throw new oe(c);return wo(t,e=e===i?e:Bs(e))},dr.reverse=Ta,dr.sampleSize=function(t,e,n){return e=(n?Wi(t,e,n):e===i)?1:Bs(e),(vs(t)?Cr:Ao)(t,e)},dr.set=function(t,e,n){return null==t?t:To(t,e,n)},dr.setWith=function(t,e,n,r){return r="function"==typeof r?r:i,null==t?t:To(t,e,n,r)},dr.shuffle=function(t){return(vs(t)?Ar:Oo)(t)},dr.slice=function(t,e,n){var r=null==t?0:t.length;return r?(n&&"number"!=typeof n&&Wi(t,e,n)?(e=0,n=r):(e=null==e?0:Bs(e),n=n===i?r:Bs(n)),No(t,e,n)):[]},dr.sortBy=Ja,dr.sortedUniq=function(t){return t&&t.length?Mo(t):[]},dr.sortedUniqBy=function(t,e){return t&&t.length?Mo(t,Pi(e,2)):[]},dr.split=function(t,e,n){return n&&"number"!=typeof n&&Wi(t,e,n)&&(e=n=i),(n=n===i?j:n>>>0)?(t=Gs(t))&&("string"==typeof e||null!=e&&!Ls(e))&&!(e=jo(e))&&Cn(t)?Ko(Ln(t),0,n):t.split(e,n):[]},dr.spread=function(t,e){if("function"!=typeof t)throw new oe(c);return e=null==e?0:Gn(Bs(e),0),wo(function(n){var r=n[e],o=Ko(n,0,e);return r&&tn(o,r),Ge(t,this,o)})},dr.tail=function(t){var e=null==t?0:t.length;return e?No(t,1,e):[]},dr.take=function(t,e,n){return t&&t.length?No(t,0,(e=n||e===i?1:Bs(e))<0?0:e):[]},dr.takeRight=function(t,e,n){var r=null==t?0:t.length;return r?No(t,(e=r-(e=n||e===i?1:Bs(e)))<0?0:e,r):[]},dr.takeRightWhile=function(t,e){return t&&t.length?Bo(t,Pi(e,3),!1,!0):[]},dr.takeWhile=function(t,e){return t&&t.length?Bo(t,Pi(e,3)):[]},dr.tap=function(t,e){return e(t),t},dr.throttle=function(t,e,n){var r=!0,o=!0;if("function"!=typeof t)throw new oe(c);return Ts(n)&&(r="leading"in n?!!n.leading:r,o="trailing"in n?!!n.trailing:o),os(t,e,{leading:r,maxWait:e,trailing:o})},dr.thru=$a,dr.toArray=Fs,dr.toPairs=fc,dr.toPairsIn=pc,dr.toPath=function(t){return vs(t)?Qe(t,la):Ms(t)?[t]:ri(ua(Gs(t)))},dr.toPlainObject=Hs,dr.transform=function(t,e,n){var r=vs(t),o=r||Es(t)||Ps(t);if(e=Pi(e,4),null==n){var i=t&&t.constructor;n=o?r?new i:[]:Ts(t)&&ws(i)?hr(Ne(t)):{}}return(o?We:Wr)(t,function(t,r,o){return e(n,t,r,o)}),n},dr.unary=function(t){return ts(t,1)},dr.union=Sa,dr.unionBy=Ra,dr.unionWith=Oa,dr.uniq=function(t){return t&&t.length?Uo(t):[]},dr.uniqBy=function(t,e){return t&&t.length?Uo(t,Pi(e,2)):[]},dr.uniqWith=function(t,e){return e="function"==typeof e?e:i,t&&t.length?Uo(t,i,e):[]},dr.unset=function(t,e){return null==t||Fo(t,e)},dr.unzip=Na,dr.unzipWith=La,dr.update=function(t,e,n){return null==t?t:$o(t,e,Vo(n))},dr.updateWith=function(t,e,n,r){return r="function"==typeof r?r:i,null==t?t:$o(t,e,Vo(n),r)},dr.values=dc,dr.valuesIn=function(t){return null==t?[]:bn(t,ic(t))},dr.without=Ia,dr.words=wc,dr.wrap=function(t,e){return ls(Vo(e),t)},dr.xor=Da,dr.xorBy=Ma,dr.xorWith=Pa,dr.zip=ja,dr.zipObject=function(t,e){return Ho(t||[],e||[],Sr)},dr.zipObjectDeep=function(t,e){return Ho(t||[],e||[],To)},dr.zipWith=Ua,dr.entries=fc,dr.entriesIn=pc,dr.extend=Ws,dr.extendWith=Ys,Dc(dr,dr),dr.add=Hc,dr.attempt=Cc,dr.camelCase=hc,dr.capitalize=mc,dr.ceil=Gc,dr.clamp=function(t,e,n){return n===i&&(n=e,e=i),n!==i&&(n=(n=qs(n))==n?n:0),e!==i&&(e=(e=qs(e))==e?e:0),Dr(qs(t),e,n)},dr.clone=function(t){return Mr(t,h)},dr.cloneDeep=function(t){return Mr(t,p|h)},dr.cloneDeepWith=function(t,e){return Mr(t,p|h,e="function"==typeof e?e:i)},dr.cloneWith=function(t,e){return Mr(t,h,e="function"==typeof e?e:i)},dr.conformsTo=function(t,e){return null==e||Pr(t,e,oc(e))},dr.deburr=gc,dr.defaultTo=function(t,e){return null==t||t!=t?e:t},dr.divide=Vc,dr.endsWith=function(t,e,n){t=Gs(t),e=jo(e);var r=t.length,o=n=n===i?r:Dr(Bs(n),0,r);return(n-=e.length)>=0&&t.slice(n,o)==e},dr.eq=ds,dr.escape=function(t){return(t=Gs(t))&&Ct.test(t)?t.replace(xt,xn):t},dr.escapeRegExp=function(t){return(t=Gs(t))&&It.test(t)?t.replace(Lt,"\\$&"):t},dr.every=function(t,e,n){var r=vs(t)?Ke:Br;return n&&Wi(t,e,n)&&(e=i),r(t,Pi(e,3))},dr.find=qa,dr.findIndex=ga,dr.findKey=function(t,e){return an(t,Pi(e,3),Wr)},dr.findLast=Ha,dr.findLastIndex=va,dr.findLastKey=function(t,e){return an(t,Pi(e,3),Yr)},dr.floor=Wc,dr.forEach=Ga,dr.forEachRight=Va,dr.forIn=function(t,e){return null==t?t:Gr(t,Pi(e,3),ic)},dr.forInRight=function(t,e){return null==t?t:Vr(t,Pi(e,3),ic)},dr.forOwn=function(t,e){return t&&Wr(t,Pi(e,3))},dr.forOwnRight=function(t,e){return t&&Yr(t,Pi(e,3))},dr.get=Qs,dr.gt=hs,dr.gte=ms,dr.has=function(t,e){return null!=t&&qi(t,e,to)},dr.hasIn=tc,dr.head=_a,dr.identity=Oc,dr.includes=function(t,e,n,r){t=_s(t)?t:dc(t),n=n&&!r?Bs(n):0;var o=t.length;return n<0&&(n=Gn(o+n,0)),Ds(t)?n<=o&&t.indexOf(e,n)>-1:!!o&&cn(t,e,n)>-1},dr.indexOf=function(t,e,n){var r=null==t?0:t.length;if(!r)return-1;var o=null==n?0:Bs(n);return o<0&&(o=Gn(r+o,0)),cn(t,e,o)},dr.inRange=function(t,e,n){return e=$s(e),n===i?(n=e,e=0):n=$s(n),function(t,e,n){return t>=Vn(e,n)&&t<Gn(e,n)}(t=qs(t),e,n)},dr.invoke=rc,dr.isArguments=gs,dr.isArray=vs,dr.isArrayBuffer=bs,dr.isArrayLike=_s,dr.isArrayLikeObject=ys,dr.isBoolean=function(t){return!0===t||!1===t||Ss(t)&&Jr(t)==H},dr.isBuffer=Es,dr.isDate=ks,dr.isElement=function(t){return Ss(t)&&1===t.nodeType&&!Ns(t)},dr.isEmpty=function(t){if(null==t)return!0;if(_s(t)&&(vs(t)||"string"==typeof t||"function"==typeof t.splice||Es(t)||Ps(t)||gs(t)))return!t.length;var e=zi(t);if(e==X||e==nt)return!t.size;if(Zi(t))return!uo(t).length;for(var n in t)if(le.call(t,n))return!1;return!0},dr.isEqual=function(t,e){return io(t,e)},dr.isEqualWith=function(t,e,n){var r=(n="function"==typeof n?n:i)?n(t,e):i;return r===i?io(t,e,i,n):!!r},dr.isError=xs,dr.isFinite=function(t){return"number"==typeof t&&zn(t)},dr.isFunction=ws,dr.isInteger=Cs,dr.isLength=As,dr.isMap=Rs,dr.isMatch=function(t,e){return t===e||ao(t,e,Ui(e))},dr.isMatchWith=function(t,e,n){return n="function"==typeof n?n:i,ao(t,e,Ui(e),n)},dr.isNaN=function(t){return Os(t)&&t!=+t},dr.isNative=function(t){if(Xi(t))throw new Jt(s);return so(t)},dr.isNil=function(t){return null==t},dr.isNull=function(t){return null===t},dr.isNumber=Os,dr.isObject=Ts,dr.isObjectLike=Ss,dr.isPlainObject=Ns,dr.isRegExp=Ls,dr.isSafeInteger=function(t){return Cs(t)&&t>=-D&&t<=D},dr.isSet=Is,dr.isString=Ds,dr.isSymbol=Ms,dr.isTypedArray=Ps,dr.isUndefined=function(t){return t===i},dr.isWeakMap=function(t){return Ss(t)&&zi(t)==at},dr.isWeakSet=function(t){return Ss(t)&&Jr(t)==st},dr.join=function(t,e){return null==t?"":qn.call(t,e)},dr.kebabCase=vc,dr.last=xa,dr.lastIndexOf=function(t,e,n){var r=null==t?0:t.length;if(!r)return-1;var o=r;return n!==i&&(o=(o=Bs(n))<0?Gn(r+o,0):Vn(o,r-1)),e==e?function(t,e,n){for(var r=n+1;r--;)if(t[r]===e)return r;return r}(t,e,o):sn(t,ln,o,!0)},dr.lowerCase=bc,dr.lowerFirst=_c,dr.lt=js,dr.lte=Us,dr.max=function(t){return t&&t.length?zr(t,Oc,Qr):i},dr.maxBy=function(t,e){return t&&t.length?zr(t,Pi(e,2),Qr):i},dr.mean=function(t){return fn(t,Oc)},dr.meanBy=function(t,e){return fn(t,Pi(e,2))},dr.min=function(t){return t&&t.length?zr(t,Oc,fo):i},dr.minBy=function(t,e){return t&&t.length?zr(t,Pi(e,2),fo):i},dr.stubArray=zc,dr.stubFalse=qc,dr.stubObject=function(){return{}},dr.stubString=function(){return""},dr.stubTrue=function(){return!0},dr.multiply=Kc,dr.nth=function(t,e){return t&&t.length?vo(t,Bs(e)):i},dr.noConflict=function(){return Ie._===this&&(Ie._=me),this},dr.noop=Mc,dr.now=Qa,dr.pad=function(t,e,n){t=Gs(t);var r=(e=Bs(e))?Nn(t):0;if(!e||r>=e)return t;var o=(e-r)/2;return bi(Fn(o),n)+t+bi(Un(o),n)},dr.padEnd=function(t,e,n){t=Gs(t);var r=(e=Bs(e))?Nn(t):0;return e&&r<e?t+bi(e-r,n):t},dr.padStart=function(t,e,n){t=Gs(t);var r=(e=Bs(e))?Nn(t):0;return e&&r<e?bi(e-r,n)+t:t},dr.parseInt=function(t,e,n){return n||null==e?e=0:e&&(e=+e),Yn(Gs(t).replace(Mt,""),e||0)},dr.random=function(t,e,n){if(n&&"boolean"!=typeof n&&Wi(t,e,n)&&(e=n=i),n===i&&("boolean"==typeof e?(n=e,e=i):"boolean"==typeof t&&(n=t,t=i)),t===i&&e===i?(t=0,e=1):(t=$s(t),e===i?(e=t,t=0):e=$s(e)),t>e){var r=t;t=e,e=r}if(n||t%1||e%1){var o=Kn();return Vn(t+o*(e-t+Re("1e-"+((o+"").length-1))),e)}return ko(t,e)},dr.reduce=function(t,e,n){var r=vs(t)?en:hn,o=arguments.length<3;return r(t,Pi(e,4),n,o,Fr)},dr.reduceRight=function(t,e,n){var r=vs(t)?nn:hn,o=arguments.length<3;return r(t,Pi(e,4),n,o,$r)},dr.repeat=function(t,e,n){return e=(n?Wi(t,e,n):e===i)?1:Bs(e),xo(Gs(t),e)},dr.replace=function(){var t=arguments,e=Gs(t[0]);return t.length<3?e:e.replace(t[1],t[2])},dr.result=function(t,e,n){var r=-1,o=(e=Wo(e,t)).length;for(o||(o=1,t=i);++r<o;){var a=null==t?i:t[la(e[r])];a===i&&(r=o,a=n),t=ws(a)?a.call(t):a}return t},dr.round=Xc,dr.runInContext=t,dr.sample=function(t){return(vs(t)?wr:Co)(t)},dr.size=function(t){if(null==t)return 0;if(_s(t))return Ds(t)?Nn(t):t.length;var e=zi(t);return e==X||e==nt?t.size:uo(t).length},dr.snakeCase=yc,dr.some=function(t,e,n){var r=vs(t)?rn:Lo;return n&&Wi(t,e,n)&&(e=i),r(t,Pi(e,3))},dr.sortedIndex=function(t,e){return Io(t,e)},dr.sortedIndexBy=function(t,e,n){return Do(t,e,Pi(n,2))},dr.sortedIndexOf=function(t,e){var n=null==t?0:t.length;if(n){var r=Io(t,e);if(r<n&&ds(t[r],e))return r}return-1},dr.sortedLastIndex=function(t,e){return Io(t,e,!0)},dr.sortedLastIndexBy=function(t,e,n){return Do(t,e,Pi(n,2),!0)},dr.sortedLastIndexOf=function(t,e){if(null!=t&&t.length){var n=Io(t,e,!0)-1;if(ds(t[n],e))return n}return-1},dr.startCase=Ec,dr.startsWith=function(t,e,n){return t=Gs(t),n=null==n?0:Dr(Bs(n),0,t.length),e=jo(e),t.slice(n,n+e.length)==e},dr.subtract=Zc,dr.sum=function(t){return t&&t.length?mn(t,Oc):0},dr.sumBy=function(t,e){return t&&t.length?mn(t,Pi(e,2)):0},dr.template=function(t,e,n){var r=dr.templateSettings;n&&Wi(t,e,n)&&(e=i),t=Gs(t),e=Ys({},e,r,Ai);var o,a,s=Ys({},e.imports,r.imports,Ai),c=oc(s),u=bn(s,c),l=0,f=e.interpolate||Xt,p="__p += '",d=ne((e.escape||Xt).source+"|"+f.source+"|"+(f===St?zt:Xt).source+"|"+(e.evaluate||Xt).source+"|$","g"),h="//# sourceURL="+(le.call(e,"sourceURL")?(e.sourceURL+"").replace(/[\r\n]/g," "):"lodash.templateSources["+ ++Ce+"]")+"\n";t.replace(d,function(e,n,r,i,s,c){return r||(r=i),p+=t.slice(l,c).replace(Zt,wn),n&&(o=!0,p+="' +\n__e("+n+") +\n'"),s&&(a=!0,p+="';\n"+s+";\n__p += '"),r&&(p+="' +\n((__t = ("+r+")) == null ? '' : __t) +\n'"),l=c+e.length,e}),p+="';\n";var m=le.call(e,"variable")&&e.variable;m||(p="with (obj) {\n"+p+"\n}\n"),p=(a?p.replace(_t,""):p).replace(yt,"$1").replace(Et,"$1;"),p="function("+(m||"obj")+") {\n"+(m?"":"obj || (obj = {});\n")+"var __t, __p = ''"+(o?", __e = _.escape":"")+(a?", __j = Array.prototype.join;\nfunction print() { __p += __j.call(arguments, '') }\n":";\n")+p+"return __p\n}";var g=Cc(function(){return Qt(c,h+"return "+p).apply(i,u)});if(g.source=p,xs(g))throw g;return g},dr.times=function(t,e){if((t=Bs(t))<1||t>D)return[];var n=j,r=Vn(t,j);e=Pi(e),t-=j;for(var o=gn(r,e);++n<t;)e(n);return o},dr.toFinite=$s,dr.toInteger=Bs,dr.toLength=zs,dr.toLower=function(t){return Gs(t).toLowerCase()},dr.toNumber=qs,dr.toSafeInteger=function(t){return t?Dr(Bs(t),-D,D):0===t?t:0},dr.toString=Gs,dr.toUpper=function(t){return Gs(t).toUpperCase()},dr.trim=function(t,e,n){if((t=Gs(t))&&(n||e===i))return t.replace(Dt,"");if(!t||!(e=jo(e)))return t;var r=Ln(t),o=Ln(e);return Ko(r,yn(r,o),En(r,o)+1).join("")},dr.trimEnd=function(t,e,n){if((t=Gs(t))&&(n||e===i))return t.replace(Pt,"");if(!t||!(e=jo(e)))return t;var r=Ln(t);return Ko(r,0,En(r,Ln(e))+1).join("")},dr.trimStart=function(t,e,n){if((t=Gs(t))&&(n||e===i))return t.replace(Mt,"");if(!t||!(e=jo(e)))return t;var r=Ln(t);return Ko(r,yn(r,Ln(e))).join("")},dr.truncate=function(t,e){var n=T,r=S;if(Ts(e)){var o="separator"in e?e.separator:o;n="length"in e?Bs(e.length):n,r="omission"in e?jo(e.omission):r}var a=(t=Gs(t)).length;if(Cn(t)){var s=Ln(t);a=s.length}if(n>=a)return t;var c=n-Nn(r);if(c<1)return r;var u=s?Ko(s,0,c).join(""):t.slice(0,c);if(o===i)return u+r;if(s&&(c+=u.length-c),Ls(o)){if(t.slice(c).search(o)){var l,f=u;for(o.global||(o=ne(o.source,Gs(qt.exec(o))+"g")),o.lastIndex=0;l=o.exec(f);)var p=l.index;u=u.slice(0,p===i?c:p)}}else if(t.indexOf(jo(o),c)!=c){var d=u.lastIndexOf(o);d>-1&&(u=u.slice(0,d))}return u+r},dr.unescape=function(t){return(t=Gs(t))&&wt.test(t)?t.replace(kt,In):t},dr.uniqueId=function(t){var e=++fe;return Gs(t)+e},dr.upperCase=kc,dr.upperFirst=xc,dr.each=Ga,dr.eachRight=Va,dr.first=_a,Dc(dr,(Yc={},Wr(dr,function(t,e){le.call(dr.prototype,e)||(Yc[e]=t)}),Yc),{chain:!1}),dr.VERSION="4.17.15",We(["bind","bindKey","curry","curryRight","partial","partialRight"],function(t){dr[t].placeholder=dr}),We(["drop","take"],function(t,e){vr.prototype[t]=function(n){n=n===i?1:Gn(Bs(n),0);var r=this.__filtered__&&!e?new vr(this):this.clone();return r.__filtered__?r.__takeCount__=Vn(n,r.__takeCount__):r.__views__.push({size:Vn(n,j),type:t+(r.__dir__<0?"Right":"")}),r},vr.prototype[t+"Right"]=function(e){return this.reverse()[t](e).reverse()}}),We(["filter","map","takeWhile"],function(t,e){var n=e+1,r=n==N||3==n;vr.prototype[t]=function(t){var e=this.clone();return e.__iteratees__.push({iteratee:Pi(t,3),type:n}),e.__filtered__=e.__filtered__||r,e}}),We(["head","last"],function(t,e){var n="take"+(e?"Right":"");vr.prototype[t]=function(){return this[n](1).value()[0]}}),We(["initial","tail"],function(t,e){var n="drop"+(e?"":"Right");vr.prototype[t]=function(){return this.__filtered__?new vr(this):this[n](1)}}),vr.prototype.compact=function(){return this.filter(Oc)},vr.prototype.find=function(t){return this.filter(t).head()},vr.prototype.findLast=function(t){return this.reverse().find(t)},vr.prototype.invokeMap=wo(function(t,e){return"function"==typeof t?new vr(this):this.map(function(n){return ro(n,t,e)})}),vr.prototype.reject=function(t){return this.filter(cs(Pi(t)))},vr.prototype.slice=function(t,e){t=Bs(t);var n=this;return n.__filtered__&&(t>0||e<0)?new vr(n):(t<0?n=n.takeRight(-t):t&&(n=n.drop(t)),e!==i&&(n=(e=Bs(e))<0?n.dropRight(-e):n.take(e-t)),n)},vr.prototype.takeRightWhile=function(t){return this.reverse().takeWhile(t).reverse()},vr.prototype.toArray=function(){return this.take(j)},Wr(vr.prototype,function(t,e){var n=/^(?:filter|find|map|reject)|While$/.test(e),r=/^(?:head|last)$/.test(e),o=dr[r?"take"+("last"==e?"Right":""):e],a=r||/^find/.test(e);o&&(dr.prototype[e]=function(){var e=this.__wrapped__,s=r?[1]:arguments,c=e instanceof vr,u=s[0],l=c||vs(e),f=function(t){var e=o.apply(dr,tn([t],s));return r&&p?e[0]:e};l&&n&&"function"==typeof u&&1!=u.length&&(c=l=!1);var p=this.__chain__,d=!!this.__actions__.length,h=a&&!p,m=c&&!d;if(!a&&l){e=m?e:new vr(this);var g=t.apply(e,s);return g.__actions__.push({func:$a,args:[f],thisArg:i}),new gr(g,p)}return h&&m?t.apply(this,s):(g=this.thru(f),h?r?g.value()[0]:g.value():g)})}),We(["pop","push","shift","sort","splice","unshift"],function(t){var e=ie[t],n=/^(?:push|sort|unshift)$/.test(t)?"tap":"thru",r=/^(?:pop|shift)$/.test(t);dr.prototype[t]=function(){var t=arguments;if(r&&!this.__chain__){var o=this.value();return e.apply(vs(o)?o:[],t)}return this[n](function(n){return e.apply(vs(n)?n:[],t)})}}),Wr(vr.prototype,function(t,e){var n=dr[e];if(n){var r=n.name+"";le.call(or,r)||(or[r]=[]),or[r].push({name:e,func:n})}}),or[hi(i,b).name]=[{name:"wrapper",func:i}],vr.prototype.clone=function(){var t=new vr(this.__wrapped__);return t.__actions__=ri(this.__actions__),t.__dir__=this.__dir__,t.__filtered__=this.__filtered__,t.__iteratees__=ri(this.__iteratees__),t.__takeCount__=this.__takeCount__,t.__views__=ri(this.__views__),t},vr.prototype.reverse=function(){if(this.__filtered__){var t=new vr(this);t.__dir__=-1,t.__filtered__=!0}else(t=this.clone()).__dir__*=-1;return t},vr.prototype.value=function(){var t=this.__wrapped__.value(),e=this.__dir__,n=vs(t),r=e<0,o=n?t.length:0,i=function(t,e,n){for(var r=-1,o=n.length;++r<o;){var i=n[r],a=i.size;switch(i.type){case"drop":t+=a;break;case"dropRight":e-=a;break;case"take":e=Vn(e,t+a);break;case"takeRight":t=Gn(t,e-a)}}return{start:t,end:e}}(0,o,this.__views__),a=i.start,s=i.end,c=s-a,u=r?s:a-1,l=this.__iteratees__,f=l.length,p=0,d=Vn(c,this.__takeCount__);if(!n||!r&&o==c&&d==c)return zo(t,this.__actions__);var h=[];t:for(;c--&&p<d;){for(var m=-1,g=t[u+=e];++m<f;){var v=l[m],b=v.iteratee,_=v.type,y=b(g);if(_==L)g=y;else if(!y){if(_==N)continue t;break t}}h[p++]=g}return h},dr.prototype.at=Ba,dr.prototype.chain=function(){return Fa(this)},dr.prototype.commit=function(){return new gr(this.value(),this.__chain__)},dr.prototype.next=function(){this.__values__===i&&(this.__values__=Fs(this.value()));var t=this.__index__>=this.__values__.length;return{done:t,value:t?i:this.__values__[this.__index__++]}},dr.prototype.plant=function(t){for(var e,n=this;n instanceof mr;){var r=pa(n);r.__index__=0,r.__values__=i,e?o.__wrapped__=r:e=r;var o=r;n=n.__wrapped__}return o.__wrapped__=t,e},dr.prototype.reverse=function(){var t=this.__wrapped__;if(t instanceof vr){var e=t;return this.__actions__.length&&(e=new vr(this)),(e=e.reverse()).__actions__.push({func:$a,args:[Ta],thisArg:i}),new gr(e,this.__chain__)}return this.thru(Ta)},dr.prototype.toJSON=dr.prototype.valueOf=dr.prototype.value=function(){return zo(this.__wrapped__,this.__actions__)},dr.prototype.first=dr.prototype.head,Ue&&(dr.prototype[Ue]=function(){return this}),dr}();Ie._=Dn,(o=function(){return Dn}.call(e,n,e,r))===i||(r.exports=o)}).call(this)}).call(this,n(11),n(21)(t))},function(t,e,n){!function(t){"object"==typeof window&&window||"object"==typeof self&&self;(function(t){var e,n=[],r=Object.keys,o={},i={},a=/^(no-?highlight|plain|text)$/i,s=/\blang(?:uage)?-([\w-]+)\b/i,c=/((^(<[^>]+>|\t|)+|(?:\n)))/gm,u="</span>",l={classPrefix:"hljs-",tabReplace:null,useBR:!1,languages:void 0};function f(t){return t.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">")}function p(t){return t.nodeName.toLowerCase()}function d(t,e){var n=t&&t.exec(e);return n&&0===n.index}function h(t){return a.test(t)}function m(t){var e,n={},r=Array.prototype.slice.call(arguments,1);for(e in t)n[e]=t[e];return r.forEach(function(t){for(e in t)n[e]=t[e]}),n}function g(t){var e=[];return function t(n,r){for(var o=n.firstChild;o;o=o.nextSibling)3===o.nodeType?r+=o.nodeValue.length:1===o.nodeType&&(e.push({event:"start",offset:r,node:o}),r=t(o,r),p(o).match(/br|hr|img|input/)||e.push({event:"stop",offset:r,node:o}));return r}(t,0),e}function v(t){if(e&&!t.langApiRestored){for(var n in t.langApiRestored=!0,e)t[n]&&(t[e[n]]=t[n]);(t.contains||[]).concat(t.variants||[]).forEach(v)}}function b(t){function e(t){return t&&t.source||t}function n(n,r){return new RegExp(e(n),"m"+(t.case_insensitive?"i":"")+(r?"g":""))}!function o(i,a){if(i.compiled)return;i.compiled=!0;i.keywords=i.keywords||i.beginKeywords;if(i.keywords){var s={},c=function(e,n){t.case_insensitive&&(n=n.toLowerCase()),n.split(" ").forEach(function(t){var n=t.split("|");s[n[0]]=[e,n[1]?Number(n[1]):1]})};"string"==typeof i.keywords?c("keyword",i.keywords):r(i.keywords).forEach(function(t){c(t,i.keywords[t])}),i.keywords=s}i.lexemesRe=n(i.lexemes||/\w+/,!0);a&&(i.beginKeywords&&(i.begin="\\b("+i.beginKeywords.split(" ").join("|")+")\\b"),i.begin||(i.begin=/\B|\b/),i.beginRe=n(i.begin),i.endSameAsBegin&&(i.end=i.begin),i.end||i.endsWithParent||(i.end=/\B|\b/),i.end&&(i.endRe=n(i.end)),i.terminator_end=e(i.end)||"",i.endsWithParent&&a.terminator_end&&(i.terminator_end+=(i.end?"|":"")+a.terminator_end));i.illegal&&(i.illegalRe=n(i.illegal));null==i.relevance&&(i.relevance=1);i.contains||(i.contains=[]);i.contains=Array.prototype.concat.apply([],i.contains.map(function(t){return function(t){t.variants&&!t.cached_variants&&(t.cached_variants=t.variants.map(function(e){return m(t,{variants:null},e)}));return t.cached_variants||t.endsWithParent&&[m(t)]||[t]}("self"===t?i:t)}));i.contains.forEach(function(t){o(t,i)});i.starts&&o(i.starts,a);var u=i.contains.map(function(t){return t.beginKeywords?"\\.?(?:"+t.begin+")\\.?":t.begin}).concat([i.terminator_end,i.illegal]).map(e).filter(Boolean);i.terminators=u.length?n(function(t,n){for(var r=/\[(?:[^\\\]]|\\.)*\]|\(\??|\\([1-9][0-9]*)|\\./,o=0,i="",a=0;a<t.length;a++){var s=o,c=e(t[a]);for(a>0&&(i+=n);c.length>0;){var u=r.exec(c);if(null==u){i+=c;break}i+=c.substring(0,u.index),c=c.substring(u.index+u[0].length),"\\"==u[0][0]&&u[1]?i+="\\"+String(Number(u[1])+s):(i+=u[0],"("==u[0]&&o++)}}return i}(u,"|"),!0):{exec:function(){return null}}}(t)}function _(t,e,n,r){function i(t){return new RegExp(t.replace(/[-\/\\^$*+?.()|[\]{}]/g,"\\$&"),"m")}function a(t,e){var n=m.case_insensitive?e[0].toLowerCase():e[0];return t.keywords.hasOwnProperty(n)&&t.keywords[n]}function s(t,e,n,r){var o=r?"":l.classPrefix,i='<span class="'+o,a=n?"":u;return i+=t+'">',t?i+e+a:e}function c(){k+=null!=v.subLanguage?function(){var t="string"==typeof v.subLanguage;if(t&&!o[v.subLanguage])return f(x);var e=t?_(v.subLanguage,x,!0,E[v.subLanguage]):y(x,v.subLanguage.length?v.subLanguage:void 0);v.relevance>0&&(C+=e.relevance);t&&(E[v.subLanguage]=e.top);return s(e.language,e.value,!1,!0)}():function(){var t,e,n,r;if(!v.keywords)return f(x);r="",e=0,v.lexemesRe.lastIndex=0,n=v.lexemesRe.exec(x);for(;n;)r+=f(x.substring(e,n.index)),(t=a(v,n))?(C+=t[1],r+=s(t[0],f(n[0]))):r+=f(n[0]),e=v.lexemesRe.lastIndex,n=v.lexemesRe.exec(x);return r+f(x.substr(e))}(),x=""}function p(t){k+=t.className?s(t.className,"",!0):"",v=Object.create(t,{parent:{value:v}})}function h(t,e){if(x+=t,null==e)return c(),0;var r=function(t,e){var n,r;for(n=0,r=e.contains.length;n<r;n++)if(d(e.contains[n].beginRe,t))return e.contains[n].endSameAsBegin&&(e.contains[n].endRe=i(e.contains[n].beginRe.exec(t)[0])),e.contains[n]}(e,v);if(r)return r.skip?x+=e:(r.excludeBegin&&(x+=e),c(),r.returnBegin||r.excludeBegin||(x=e)),p(r),r.returnBegin?0:e.length;var o=function t(e,n){if(d(e.endRe,n)){for(;e.endsParent&&e.parent;)e=e.parent;return e}if(e.endsWithParent)return t(e.parent,n)}(v,e);if(o){var a=v;a.skip?x+=e:(a.returnEnd||a.excludeEnd||(x+=e),c(),a.excludeEnd&&(x=e));do{v.className&&(k+=u),v.skip||v.subLanguage||(C+=v.relevance),v=v.parent}while(v!==o.parent);return o.starts&&(o.endSameAsBegin&&(o.starts.endRe=o.endRe),p(o.starts)),a.returnEnd?0:e.length}if(function(t,e){return!n&&d(e.illegalRe,t)}(e,v))throw new Error('Illegal lexeme "'+e+'" for mode "'+(v.className||"<unnamed>")+'"');return x+=e,e.length||1}var m=w(t);if(!m)throw new Error('Unknown language: "'+t+'"');b(m);var g,v=r||m,E={},k="";for(g=v;g!==m;g=g.parent)g.className&&(k=s(g.className,"",!0)+k);var x="",C=0;try{for(var A,T,S=0;v.terminators.lastIndex=S,A=v.terminators.exec(e);)T=h(e.substring(S,A.index),A[0]),S=A.index+T;for(h(e.substr(S)),g=v;g.parent;g=g.parent)g.className&&(k+=u);return{relevance:C,value:k,language:t,top:v}}catch(t){if(t.message&&-1!==t.message.indexOf("Illegal"))return{relevance:0,value:f(e)};throw t}}function y(t,e){e=e||l.languages||r(o);var n={relevance:0,value:f(t)},i=n;return e.filter(w).filter(C).forEach(function(e){var r=_(e,t,!1);r.language=e,r.relevance>i.relevance&&(i=r),r.relevance>n.relevance&&(i=n,n=r)}),i.language&&(n.second_best=i),n}function E(t){return l.tabReplace||l.useBR?t.replace(c,function(t,e){return l.useBR&&"\n"===t?"<br>":l.tabReplace?e.replace(/\t/g,l.tabReplace):""}):t}function k(t){var e,r,o,a,c,u=function(t){var e,n,r,o,i=t.className+" ";if(i+=t.parentNode?t.parentNode.className:"",n=s.exec(i))return w(n[1])?n[1]:"no-highlight";for(i=i.split(/\s+/),e=0,r=i.length;e<r;e++)if(h(o=i[e])||w(o))return o}(t);h(u)||(l.useBR?(e=document.createElementNS("http://www.w3.org/1999/xhtml","div")).innerHTML=t.innerHTML.replace(/\n/g,"").replace(/<br[ \/]*>/g,"\n"):e=t,c=e.textContent,o=u?_(u,c,!0):y(c),(r=g(e)).length&&((a=document.createElementNS("http://www.w3.org/1999/xhtml","div")).innerHTML=o.value,o.value=function(t,e,r){var o=0,i="",a=[];function s(){return t.length&&e.length?t[0].offset!==e[0].offset?t[0].offset<e[0].offset?t:e:"start"===e[0].event?t:e:t.length?t:e}function c(t){i+="<"+p(t)+n.map.call(t.attributes,function(t){return" "+t.nodeName+'="'+f(t.value).replace('"',""")+'"'}).join("")+">"}function u(t){i+="</"+p(t)+">"}function l(t){("start"===t.event?c:u)(t.node)}for(;t.length||e.length;){var d=s();if(i+=f(r.substring(o,d[0].offset)),o=d[0].offset,d===t){a.reverse().forEach(u);do{l(d.splice(0,1)[0]),d=s()}while(d===t&&d.length&&d[0].offset===o);a.reverse().forEach(c)}else"start"===d[0].event?a.push(d[0].node):a.pop(),l(d.splice(0,1)[0])}return i+f(r.substr(o))}(r,g(a),c)),o.value=E(o.value),t.innerHTML=o.value,t.className=function(t,e,n){var r=e?i[e]:n,o=[t.trim()];t.match(/\bhljs\b/)||o.push("hljs");-1===t.indexOf(r)&&o.push(r);return o.join(" ").trim()}(t.className,u,o.language),t.result={language:o.language,re:o.relevance},o.second_best&&(t.second_best={language:o.second_best.language,re:o.second_best.relevance}))}function x(){if(!x.called){x.called=!0;var t=document.querySelectorAll("pre code");n.forEach.call(t,k)}}function w(t){return t=(t||"").toLowerCase(),o[t]||o[i[t]]}function C(t){var e=w(t);return e&&!e.disableAutodetect}t.highlight=_,t.highlightAuto=y,t.fixMarkup=E,t.highlightBlock=k,t.configure=function(t){l=m(l,t)},t.initHighlighting=x,t.initHighlightingOnLoad=function(){addEventListener("DOMContentLoaded",x,!1),addEventListener("load",x,!1)},t.registerLanguage=function(e,n){var r=o[e]=n(t);v(r),r.aliases&&r.aliases.forEach(function(t){i[t]=e})},t.listLanguages=function(){return r(o)},t.getLanguage=w,t.autoDetection=C,t.inherit=m,t.IDENT_RE="[a-zA-Z]\\w*",t.UNDERSCORE_IDENT_RE="[a-zA-Z_]\\w*",t.NUMBER_RE="\\b\\d+(\\.\\d+)?",t.C_NUMBER_RE="(-?)(\\b0[xX][a-fA-F0-9]+|(\\b\\d+(\\.\\d*)?|\\.\\d+)([eE][-+]?\\d+)?)",t.BINARY_NUMBER_RE="\\b(0b[01]+)",t.RE_STARTERS_RE="!|!=|!==|%|%=|&|&&|&=|\\*|\\*=|\\+|\\+=|,|-|-=|/=|/|:|;|<<|<<=|<=|<|===|==|=|>>>=|>>=|>=|>>>|>>|>|\\?|\\[|\\{|\\(|\\^|\\^=|\\||\\|=|\\|\\||~",t.BACKSLASH_ESCAPE={begin:"\\\\[\\s\\S]",relevance:0},t.APOS_STRING_MODE={className:"string",begin:"'",end:"'",illegal:"\\n",contains:[t.BACKSLASH_ESCAPE]},t.QUOTE_STRING_MODE={className:"string",begin:'"',end:'"',illegal:"\\n",contains:[t.BACKSLASH_ESCAPE]},t.PHRASAL_WORDS_MODE={begin:/\b(a|an|the|are|I'm|isn't|don't|doesn't|won't|but|just|should|pretty|simply|enough|gonna|going|wtf|so|such|will|you|your|they|like|more)\b/},t.COMMENT=function(e,n,r){var o=t.inherit({className:"comment",begin:e,end:n,contains:[]},r||{});return o.contains.push(t.PHRASAL_WORDS_MODE),o.contains.push({className:"doctag",begin:"(?:TODO|FIXME|NOTE|BUG|XXX):",relevance:0}),o},t.C_LINE_COMMENT_MODE=t.COMMENT("//","$"),t.C_BLOCK_COMMENT_MODE=t.COMMENT("/\\*","\\*/"),t.HASH_COMMENT_MODE=t.COMMENT("#","$"),t.NUMBER_MODE={className:"number",begin:t.NUMBER_RE,relevance:0},t.C_NUMBER_MODE={className:"number",begin:t.C_NUMBER_RE,relevance:0},t.BINARY_NUMBER_MODE={className:"number",begin:t.BINARY_NUMBER_RE,relevance:0},t.CSS_NUMBER_MODE={className:"number",begin:t.NUMBER_RE+"(%|em|ex|ch|rem|vw|vh|vmin|vmax|cm|mm|in|pt|pc|px|deg|grad|rad|turn|s|ms|Hz|kHz|dpi|dpcm|dppx)?",relevance:0},t.REGEXP_MODE={className:"regexp",begin:/\//,end:/\/[gimuy]*/,illegal:/\n/,contains:[t.BACKSLASH_ESCAPE,{begin:/\[/,end:/\]/,relevance:0,contains:[t.BACKSLASH_ESCAPE]}]},t.TITLE_MODE={className:"title",begin:t.IDENT_RE,relevance:0},t.UNDERSCORE_TITLE_MODE={className:"title",begin:t.UNDERSCORE_IDENT_RE,relevance:0},t.METHOD_GUARD={begin:"\\.\\s*"+t.UNDERSCORE_IDENT_RE,relevance:0}})(e)}()},function(t,e,n){"use strict";t.exports=n(102)},function(t,e,n){"use strict";t.exports.encode=n(103),t.exports.decode=n(104),t.exports.format=n(105),t.exports.parse=n(106)},function(t,e){t.exports=/[\0-\uD7FF\uE000-\uFFFF]|[\uD800-\uDBFF][\uDC00-\uDFFF]|[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?:[^\uD800-\uDBFF]|^)[\uDC00-\uDFFF]/},function(t,e){t.exports=/[\0-\x1F\x7F-\x9F]/},function(t,e){t.exports=/[ \xA0\u1680\u2000-\u200A\u2028\u2029\u202F\u205F\u3000]/},function(t,e,n){"use strict";var r="<[A-Za-z][A-Za-z0-9\\-]*(?:\\s+[a-zA-Z_:][a-zA-Z0-9:._-]*(?:\\s*=\\s*(?:[^\"'=<>`\\x00-\\x20]+|'[^']*'|\"[^\"]*\"))?)*\\s*\\/?>",o="<\\/[A-Za-z][A-Za-z0-9\\-]*\\s*>",i=new RegExp("^(?:"+r+"|"+o+"|\x3c!----\x3e|\x3c!--(?:-?[^>-])(?:-?[^-])*--\x3e|<[?].*?[?]>|<![A-Z]+\\s+[^>]*>|<!\\[CDATA\\[[\\s\\S]*?\\]\\]>)"),a=new RegExp("^(?:"+r+"|"+o+")");t.exports.HTML_TAG_RE=i,t.exports.HTML_OPEN_CLOSE_TAG_RE=a},function(t,e,n){"use strict";t.exports.tokenize=function(t,e){var n,r,o,i,a=t.pos,s=t.src.charCodeAt(a);if(e)return!1;if(126!==s)return!1;if(o=(r=t.scanDelims(t.pos,!0)).length,i=String.fromCharCode(s),o<2)return!1;for(o%2&&(t.push("text","",0).content=i,o--),n=0;n<o;n+=2)t.push("text","",0).content=i+i,t.delimiters.push({marker:s,jump:n,token:t.tokens.length-1,level:t.level,end:-1,open:r.can_open,close:r.can_close});return t.pos+=r.length,!0},t.exports.postProcess=function(t){var e,n,r,o,i,a=[],s=t.delimiters,c=t.delimiters.length;for(e=0;e<c;e++)126===(r=s[e]).marker&&-1!==r.end&&(o=s[r.end],(i=t.tokens[r.token]).type="s_open",i.tag="s",i.nesting=1,i.markup="~~",i.content="",(i=t.tokens[o.token]).type="s_close",i.tag="s",i.nesting=-1,i.markup="~~",i.content="","text"===t.tokens[o.token-1].type&&"~"===t.tokens[o.token-1].content&&a.push(o.token-1));for(;a.length;){for(n=(e=a.pop())+1;n<t.tokens.length&&"s_close"===t.tokens[n].type;)n++;e!==--n&&(i=t.tokens[n],t.tokens[n]=t.tokens[e],t.tokens[e]=i)}}},function(t,e,n){"use strict";t.exports.tokenize=function(t,e){var n,r,o=t.pos,i=t.src.charCodeAt(o);if(e)return!1;if(95!==i&&42!==i)return!1;for(r=t.scanDelims(t.pos,42===i),n=0;n<r.length;n++)t.push("text","",0).content=String.fromCharCode(i),t.delimiters.push({marker:i,length:r.length,jump:n,token:t.tokens.length-1,level:t.level,end:-1,open:r.can_open,close:r.can_close});return t.pos+=r.length,!0},t.exports.postProcess=function(t){var e,n,r,o,i,a,s=t.delimiters;for(e=t.delimiters.length-1;e>=0;e--)95!==(n=s[e]).marker&&42!==n.marker||-1!==n.end&&(r=s[n.end],a=e>0&&s[e-1].end===n.end+1&&s[e-1].token===n.token-1&&s[n.end+1].token===r.token+1&&s[e-1].marker===n.marker,i=String.fromCharCode(n.marker),(o=t.tokens[n.token]).type=a?"strong_open":"em_open",o.tag=a?"strong":"em",o.nesting=1,o.markup=a?i+i:i,o.content="",(o=t.tokens[r.token]).type=a?"strong_close":"em_close",o.tag=a?"strong":"em",o.nesting=-1,o.markup=a?i+i:i,o.content="",a&&(t.tokens[s[e-1].token].content="",t.tokens[s[n.end+1].token].content="",e--))}},function(t,e,n){(function(t,r){var o;/*! https://mths.be/punycode v1.4.1 by @mathias */!function(i){e&&e.nodeType,t&&t.nodeType;var a="object"==typeof r&&r;a.global!==a&&a.window!==a&&a.self;var s,c=2147483647,u=36,l=1,f=26,p=38,d=700,h=72,m=128,g="-",v=/^xn--/,b=/[^\x20-\x7E]/,_=/[\x2E\u3002\uFF0E\uFF61]/g,y={overflow:"Overflow: input needs wider integers to process","not-basic":"Illegal input >= 0x80 (not a basic code point)","invalid-input":"Invalid input"},E=u-l,k=Math.floor,x=String.fromCharCode;function w(t){throw new RangeError(y[t])}function C(t,e){for(var n=t.length,r=[];n--;)r[n]=e(t[n]);return r}function A(t,e){var n=t.split("@"),r="";return n.length>1&&(r=n[0]+"@",t=n[1]),r+C((t=t.replace(_,".")).split("."),e).join(".")}function T(t){for(var e,n,r=[],o=0,i=t.length;o<i;)(e=t.charCodeAt(o++))>=55296&&e<=56319&&o<i?56320==(64512&(n=t.charCodeAt(o++)))?r.push(((1023&e)<<10)+(1023&n)+65536):(r.push(e),o--):r.push(e);return r}function S(t){return C(t,function(t){var e="";return t>65535&&(e+=x((t-=65536)>>>10&1023|55296),t=56320|1023&t),e+=x(t)}).join("")}function R(t,e){return t+22+75*(t<26)-((0!=e)<<5)}function O(t,e,n){var r=0;for(t=n?k(t/d):t>>1,t+=k(t/e);t>E*f>>1;r+=u)t=k(t/E);return k(r+(E+1)*t/(t+p))}function N(t){var e,n,r,o,i,a,s,p,d,v,b,_=[],y=t.length,E=0,x=m,C=h;for((n=t.lastIndexOf(g))<0&&(n=0),r=0;r<n;++r)t.charCodeAt(r)>=128&&w("not-basic"),_.push(t.charCodeAt(r));for(o=n>0?n+1:0;o<y;){for(i=E,a=1,s=u;o>=y&&w("invalid-input"),((p=(b=t.charCodeAt(o++))-48<10?b-22:b-65<26?b-65:b-97<26?b-97:u)>=u||p>k((c-E)/a))&&w("overflow"),E+=p*a,!(p<(d=s<=C?l:s>=C+f?f:s-C));s+=u)a>k(c/(v=u-d))&&w("overflow"),a*=v;C=O(E-i,e=_.length+1,0==i),k(E/e)>c-x&&w("overflow"),x+=k(E/e),E%=e,_.splice(E++,0,x)}return S(_)}function L(t){var e,n,r,o,i,a,s,p,d,v,b,_,y,E,C,A=[];for(_=(t=T(t)).length,e=m,n=0,i=h,a=0;a<_;++a)(b=t[a])<128&&A.push(x(b));for(r=o=A.length,o&&A.push(g);r<_;){for(s=c,a=0;a<_;++a)(b=t[a])>=e&&b<s&&(s=b);for(s-e>k((c-n)/(y=r+1))&&w("overflow"),n+=(s-e)*y,e=s,a=0;a<_;++a)if((b=t[a])<e&&++n>c&&w("overflow"),b==e){for(p=n,d=u;!(p<(v=d<=i?l:d>=i+f?f:d-i));d+=u)C=p-v,E=u-v,A.push(x(R(v+C%E,0))),p=k(C/E);A.push(x(R(p,0))),i=O(n,y,r==o),n=0,++r}++n,++e}return A.join("")}s={version:"1.4.1",ucs2:{decode:T,encode:S},decode:N,encode:L,toASCII:function(t){return A(t,function(t){return b.test(t)?"xn--"+L(t):t})},toUnicode:function(t){return A(t,function(t){return v.test(t)?N(t.slice(4).toLowerCase()):t})}},void 0===(o=function(){return s}.call(e,n,e,t))||(t.exports=o)}()}).call(this,n(21)(t),n(11))},function(t,e,n){"use strict";t.exports=function(t,e){!0===e&&(e=0);var n=t.indexOf("://"),r=t.substring(0,n).split("+").filter(Boolean);return"number"==typeof e?r[e]:r}},function(t,e,n){"use strict";var r=n(64);t.exports=function t(e){if(Array.isArray(e))return-1!==e.indexOf("ssh")||-1!==e.indexOf("rsync");if("string"!=typeof e)return!1;var n=r(e);return e=e.substring(e.indexOf("://")+3),!!t(n)||e.indexOf("@")<e.indexOf(":")}},function(t,e,n){"use strict";e.decode=e.parse=n(166),e.encode=e.stringify=n(167)},function(t,e,n){var r=n(172);t.exports=function(t,e,n){var o=t.length;return n=void 0===n?o:n,!e&&n>=o?t:r(t,e,n)}},function(t,e){var n=RegExp("[\\u200d\\ud800-\\udfff\\u0300-\\u036f\\ufe20-\\ufe2f\\u20d0-\\u20ff\\ufe0e\\ufe0f]");t.exports=function(t){return n.test(t)}},function(t,e,n){var r=n(173),o=n(68),i=n(174);t.exports=function(t){return o(t)?i(t):r(t)}},function(t,e,n){var r=n(22),o=n(175),i=n(9),a=n(23),s=1/0,c=r?r.prototype:void 0,u=c?c.toString:void 0;t.exports=function t(e){if("string"==typeof e)return e;if(i(e))return o(e,t)+"";if(a(e))return u?u.call(e):"";var n=e+"";return"0"==n&&1/e==-s?"-0":n}},function(t,e,n){(function(e){var n="object"==typeof e&&e&&e.Object===Object&&e;t.exports=n}).call(this,n(11))},function(t,e,n){var r=n(182),o=n(183),i=n(184);t.exports=function(t,e,n){return e==e?i(t,e,n):r(t,o,n)}},function(t,e,n){var r=n(17),o=n(19),i="[object AsyncFunction]",a="[object Function]",s="[object GeneratorFunction]",c="[object Proxy]";t.exports=function(t){if(!o(t))return!1;var e=r(t);return e==a||e==s||e==i||e==c}},function(t,e,n){var r=n(75),o=n(196),i=Object.prototype.hasOwnProperty;t.exports=function(t){if(!r(t))return o(t);var e=[];for(var n in Object(t))i.call(t,n)&&"constructor"!=n&&e.push(n);return e}},function(t,e){var n=Object.prototype;t.exports=function(t){var e=t&&t.constructor;return t===("function"==typeof e&&e.prototype||n)}},function(t,e,n){var r=n(198),o=n(44),i=n(203),a=n(78),s=n(204),c=n(17),u=n(77),l=u(r),f=u(o),p=u(i),d=u(a),h=u(s),m=c;(r&&"[object DataView]"!=m(new r(new ArrayBuffer(1)))||o&&"[object Map]"!=m(new o)||i&&"[object Promise]"!=m(i.resolve())||a&&"[object Set]"!=m(new a)||s&&"[object WeakMap]"!=m(new s))&&(m=function(t){var e=c(t),n="[object Object]"==e?t.constructor:void 0,r=n?u(n):"";if(r)switch(r){case l:return"[object DataView]";case f:return"[object Map]";case p:return"[object Promise]";case d:return"[object Set]";case h:return"[object WeakMap]"}return e}),t.exports=m},function(t,e){var n=Function.prototype.toString;t.exports=function(t){if(null!=t){try{return n.call(t)}catch(t){}try{return t+""}catch(t){}}return""}},function(t,e,n){var r=n(12)(n(8),"Set");t.exports=r},function(t,e,n){var r=n(48),o=n(233),i=n(234);function a(t){var e=-1,n=null==t?0:t.length;for(this.__data__=new r;++e<n;)this.add(t[e])}a.prototype.add=a.prototype.push=o,a.prototype.has=i,t.exports=a},function(t,e){t.exports=function(t,e){return t.has(e)}},function(t,e,n){var r=n(27),o=n(248),i=n(249),a=n(250),s=n(251),c=n(252);function u(t){var e=this.__data__=new r(t);this.size=e.size}u.prototype.clear=o,u.prototype.delete=i,u.prototype.get=a,u.prototype.has=s,u.prototype.set=c,t.exports=u},function(t,e,n){var r=n(253),o=n(18);t.exports=function t(e,n,i,a,s){return e===n||(null==e||null==n||!o(e)&&!o(n)?e!=e&&n!=n:r(e,n,i,a,t,s))}},function(t,e,n){var r=n(79),o=n(254),i=n(80),a=1,s=2;t.exports=function(t,e,n,c,u,l){var f=n&a,p=t.length,d=e.length;if(p!=d&&!(f&&d>p))return!1;var h=l.get(t);if(h&&l.get(e))return h==e;var m=-1,g=!0,v=n&s?new r:void 0;for(l.set(t,e),l.set(e,t);++m<p;){var b=t[m],_=e[m];if(c)var y=f?c(_,b,m,e,t,l):c(b,_,m,t,e,l);if(void 0!==y){if(y)continue;g=!1;break}if(v){if(!o(e,function(t,e){if(!i(v,e)&&(b===t||u(b,t,n,c,l)))return v.push(e)})){g=!1;break}}else if(b!==_&&!u(b,_,n,c,l)){g=!1;break}}return l.delete(t),l.delete(e),g}},function(t,e,n){var r=n(19);t.exports=function(t){return t==t&&!r(t)}},function(t,e){t.exports=function(t,e){return function(n){return null!=n&&n[t]===e&&(void 0!==e||t in Object(n))}}},function(t,e,n){var r=n(87),o=n(30);t.exports=function(t,e){for(var n=0,i=(e=r(e,t)).length;null!=t&&n<i;)t=t[o(e[n++])];return n&&n==i?t:void 0}},function(t,e,n){var r=n(9),o=n(51),i=n(268),a=n(16);t.exports=function(t,e){return r(t)?t:o(t,e)?[t]:i(a(t))}},function(t,e){var n={utf8:{stringToBytes:function(t){return n.bin.stringToBytes(unescape(encodeURIComponent(t)))},bytesToString:function(t){return decodeURIComponent(escape(n.bin.bytesToString(t)))}},bin:{stringToBytes:function(t){for(var e=[],n=0;n<t.length;n++)e.push(255&t.charCodeAt(n));return e},bytesToString:function(t){for(var e=[],n=0;n<t.length;n++)e.push(String.fromCharCode(t[n]));return e.join("")}}};t.exports=n},function(t,e,n){var r=n(157),o=n(158),i=n(159);t.exports=function(t,e){return r(t)||o(t,e)||i()}},function(t,e,n){"use strict";e.__esModule=!0;var r=s(n(179)),o=s(n(211)),i=s(n(212)),a=s(n(213));function s(t){return t&&t.__esModule?t:{default:t}}e.default={format:function(t,e){switch((e=e||{}).language){case"db2":return new r.default(e).format(t);case"n1ql":return new o.default(e).format(t);case"pl/sql":return new i.default(e).format(t);case"sql":case void 0:return new a.default(e).format(t);default:throw Error("Unsupported SQL dialect: "+e.language)}}},t.exports=e.default},function(t,e,n){var r=n(239),o=n(240),i=n(245);t.exports=function(t,e){return r(t,i(e,3),o)}},function(t,e,n){var r,o,i,a,s;r=n(278),o=n(88).utf8,i=n(279),a=n(88).bin,(s=function(t,e){t.constructor==String?t=e&&"binary"===e.encoding?a.stringToBytes(t):o.stringToBytes(t):i(t)?t=Array.prototype.slice.call(t,0):Array.isArray(t)||(t=t.toString());for(var n=r.bytesToWords(t),c=8*t.length,u=1732584193,l=-271733879,f=-1732584194,p=271733878,d=0;d<n.length;d++)n[d]=16711935&(n[d]<<8|n[d]>>>24)|4278255360&(n[d]<<24|n[d]>>>8);n[c>>>5]|=128<<c%32,n[14+(c+64>>>9<<4)]=c;var h=s._ff,m=s._gg,g=s._hh,v=s._ii;for(d=0;d<n.length;d+=16){var b=u,_=l,y=f,E=p;u=h(u,l,f,p,n[d+0],7,-680876936),p=h(p,u,l,f,n[d+1],12,-389564586),f=h(f,p,u,l,n[d+2],17,606105819),l=h(l,f,p,u,n[d+3],22,-1044525330),u=h(u,l,f,p,n[d+4],7,-176418897),p=h(p,u,l,f,n[d+5],12,1200080426),f=h(f,p,u,l,n[d+6],17,-1473231341),l=h(l,f,p,u,n[d+7],22,-45705983),u=h(u,l,f,p,n[d+8],7,1770035416),p=h(p,u,l,f,n[d+9],12,-1958414417),f=h(f,p,u,l,n[d+10],17,-42063),l=h(l,f,p,u,n[d+11],22,-1990404162),u=h(u,l,f,p,n[d+12],7,1804603682),p=h(p,u,l,f,n[d+13],12,-40341101),f=h(f,p,u,l,n[d+14],17,-1502002290),u=m(u,l=h(l,f,p,u,n[d+15],22,1236535329),f,p,n[d+1],5,-165796510),p=m(p,u,l,f,n[d+6],9,-1069501632),f=m(f,p,u,l,n[d+11],14,643717713),l=m(l,f,p,u,n[d+0],20,-373897302),u=m(u,l,f,p,n[d+5],5,-701558691),p=m(p,u,l,f,n[d+10],9,38016083),f=m(f,p,u,l,n[d+15],14,-660478335),l=m(l,f,p,u,n[d+4],20,-405537848),u=m(u,l,f,p,n[d+9],5,568446438),p=m(p,u,l,f,n[d+14],9,-1019803690),f=m(f,p,u,l,n[d+3],14,-187363961),l=m(l,f,p,u,n[d+8],20,1163531501),u=m(u,l,f,p,n[d+13],5,-1444681467),p=m(p,u,l,f,n[d+2],9,-51403784),f=m(f,p,u,l,n[d+7],14,1735328473),u=g(u,l=m(l,f,p,u,n[d+12],20,-1926607734),f,p,n[d+5],4,-378558),p=g(p,u,l,f,n[d+8],11,-2022574463),f=g(f,p,u,l,n[d+11],16,1839030562),l=g(l,f,p,u,n[d+14],23,-35309556),u=g(u,l,f,p,n[d+1],4,-1530992060),p=g(p,u,l,f,n[d+4],11,1272893353),f=g(f,p,u,l,n[d+7],16,-155497632),l=g(l,f,p,u,n[d+10],23,-1094730640),u=g(u,l,f,p,n[d+13],4,681279174),p=g(p,u,l,f,n[d+0],11,-358537222),f=g(f,p,u,l,n[d+3],16,-722521979),l=g(l,f,p,u,n[d+6],23,76029189),u=g(u,l,f,p,n[d+9],4,-640364487),p=g(p,u,l,f,n[d+12],11,-421815835),f=g(f,p,u,l,n[d+15],16,530742520),u=v(u,l=g(l,f,p,u,n[d+2],23,-995338651),f,p,n[d+0],6,-198630844),p=v(p,u,l,f,n[d+7],10,1126891415),f=v(f,p,u,l,n[d+14],15,-1416354905),l=v(l,f,p,u,n[d+5],21,-57434055),u=v(u,l,f,p,n[d+12],6,1700485571),p=v(p,u,l,f,n[d+3],10,-1894986606),f=v(f,p,u,l,n[d+10],15,-1051523),l=v(l,f,p,u,n[d+1],21,-2054922799),u=v(u,l,f,p,n[d+8],6,1873313359),p=v(p,u,l,f,n[d+15],10,-30611744),f=v(f,p,u,l,n[d+6],15,-1560198380),l=v(l,f,p,u,n[d+13],21,1309151649),u=v(u,l,f,p,n[d+4],6,-145523070),p=v(p,u,l,f,n[d+11],10,-1120210379),f=v(f,p,u,l,n[d+2],15,718787259),l=v(l,f,p,u,n[d+9],21,-343485551),u=u+b>>>0,l=l+_>>>0,f=f+y>>>0,p=p+E>>>0}return r.endian([u,l,f,p])})._ff=function(t,e,n,r,o,i,a){var s=t+(e&n|~e&r)+(o>>>0)+a;return(s<<i|s>>>32-i)+e},s._gg=function(t,e,n,r,o,i,a){var s=t+(e&r|n&~r)+(o>>>0)+a;return(s<<i|s>>>32-i)+e},s._hh=function(t,e,n,r,o,i,a){var s=t+(e^n^r)+(o>>>0)+a;return(s<<i|s>>>32-i)+e},s._ii=function(t,e,n,r,o,i,a){var s=t+(n^(e|~r))+(o>>>0)+a;return(s<<i|s>>>32-i)+e},s._blocksize=16,s._digestsize=16,t.exports=function(t,e){if(null==t)throw new Error("Illegal argument "+t);var n=r.wordsToBytes(s(t,e));return e&&e.asBytes?n:e&&e.asString?a.bytesToString(n):r.bytesToHex(n)}},function(t,e,n){var r=n(94);"string"==typeof r&&(r=[[t.i,r,""]]);var o={hmr:!0,transform:void 0,insertInto:void 0};n(96)(r,o);r.locals&&(t.exports=r.locals)},function(t,e,n){(t.exports=n(95)(!1)).push([t.i,'@charset \'UTF-8\';\n\n/*! normalize.css v8.0.1 | MIT License | github.com/necolas/normalize.css */\n\n/* Document\n ========================================================================== */\n\n/**\n * 1. Correct the line height in all browsers.\n * 2. Prevent adjustments of font size after orientation changes in iOS.\n */\n\nhtml {\n line-height: 1.15; /* 1 */\n -webkit-text-size-adjust: 100%; /* 2 */\n}\n\n/* Sections\n ========================================================================== */\n\n/**\n * Remove the margin in all browsers.\n */\n\nbody {\n margin: 0;\n}\n\n/**\n * Render the `main` element consistently in IE.\n */\n\nmain {\n display: block;\n}\n\n/**\n * Correct the font size and margin on `h1` elements within `section` and\n * `article` contexts in Chrome, Firefox, and Safari.\n */\n\n/* Grouping content\n ========================================================================== */\n\n/**\n * 1. Add the correct box sizing in Firefox.\n * 2. Show the overflow in Edge and IE.\n */\n\n/**\n * 1. Correct the inheritance and scaling of font size in all browsers.\n * 2. Correct the odd `em` font sizing in all browsers.\n */\n\npre {\n font-family: monospace, monospace; /* 1 */\n font-size: 1em; /* 2 */\n}\n\n/* Text-level semantics\n ========================================================================== */\n\n/**\n * Remove the gray background on active links in IE 10.\n */\n\na {\n background-color: transparent;\n}\n\n/**\n * 1. Remove the bottom border in Chrome 57-\n * 2. Add the correct text decoration in Chrome, Edge, IE, Opera, and Safari.\n */\n\n/**\n * Add the correct font weight in Chrome, Edge, and Safari.\n */\n\nb,\nstrong {\n font-weight: bolder;\n}\n\n/**\n * 1. Correct the inheritance and scaling of font size in all browsers.\n * 2. Correct the odd `em` font sizing in all browsers.\n */\n\ncode {\n font-family: monospace, monospace; /* 1 */\n font-size: 1em; /* 2 */\n}\n\n/**\n * Add the correct font size in all browsers.\n */\n\n/**\n * Prevent `sub` and `sup` elements from affecting the line height in\n * all browsers.\n */\n\n/* Embedded content\n ========================================================================== */\n\n/**\n * Remove the border on images inside links in IE 10.\n */\n\n/* Forms\n ========================================================================== */\n\n/**\n * 1. Change the font styles in all browsers.\n * 2. Remove the margin in Firefox and Safari.\n */\n\nbutton,\ninput,\nselect,\ntextarea {\n font-family: inherit; /* 1 */\n font-size: 100%; /* 1 */\n line-height: 1.15; /* 1 */\n margin: 0; /* 2 */\n}\n\n/**\n * Show the overflow in IE.\n * 1. Show the overflow in Edge.\n */\n\nbutton,\ninput { /* 1 */\n overflow: visible;\n}\n\n/**\n * Remove the inheritance of text transform in Edge, Firefox, and IE.\n * 1. Remove the inheritance of text transform in Firefox.\n */\n\nbutton,\nselect { /* 1 */\n text-transform: none;\n}\n\n/**\n * Correct the inability to style clickable types in iOS and Safari.\n */\n\nbutton,\n[type="button"],\n[type="reset"],\n[type="submit"] {\n -webkit-appearance: button;\n}\n\n/**\n * Remove the inner border and padding in Firefox.\n */\n\nbutton::-moz-focus-inner,\n[type="button"]::-moz-focus-inner,\n[type="reset"]::-moz-focus-inner,\n[type="submit"]::-moz-focus-inner {\n border-style: none;\n padding: 0;\n}\n\n/**\n * Restore the focus styles unset by the previous rule.\n */\n\nbutton:-moz-focusring,\n[type="button"]:-moz-focusring,\n[type="reset"]:-moz-focusring,\n[type="submit"]:-moz-focusring {\n outline: 1px dotted ButtonText;\n}\n\n/**\n * Correct the padding in Firefox.\n */\n\n/**\n * 1. Correct the text wrapping in Edge and IE.\n * 2. Correct the color inheritance from `fieldset` elements in IE.\n * 3. Remove the padding so developers are not caught out when they zero out\n * `fieldset` elements in all browsers.\n */\n\nlegend {\n box-sizing: border-box; /* 1 */\n color: inherit; /* 2 */\n display: table; /* 1 */\n max-width: 100%; /* 1 */\n padding: 0; /* 3 */\n white-space: normal; /* 1 */\n}\n\n/**\n * Add the correct vertical alignment in Chrome, Firefox, and Opera.\n */\n\n/**\n * Remove the default vertical scrollbar in IE 10+.\n */\n\ntextarea {\n overflow: auto;\n}\n\n/**\n * 1. Add the correct box sizing in IE 10.\n * 2. Remove the padding in IE 10.\n */\n\n[type="checkbox"],\n[type="radio"] {\n box-sizing: border-box; /* 1 */\n padding: 0; /* 2 */\n}\n\n/**\n * Correct the cursor style of increment and decrement buttons in Chrome.\n */\n\n[type="number"]::-webkit-inner-spin-button,\n[type="number"]::-webkit-outer-spin-button {\n height: auto;\n}\n\n/**\n * 1. Correct the odd appearance in Chrome and Safari.\n * 2. Correct the outline style in Safari.\n */\n\n[type="search"] {\n -webkit-appearance: textfield; /* 1 */\n outline-offset: -2px; /* 2 */\n}\n\n/**\n * Remove the inner padding in Chrome and Safari on macOS.\n */\n\n[type="search"]::-webkit-search-decoration {\n -webkit-appearance: none;\n}\n\n/**\n * 1. Correct the inability to style clickable types in iOS and Safari.\n * 2. Change font properties to `inherit` in Safari.\n */\n\n::-webkit-file-upload-button {\n -webkit-appearance: button; /* 1 */\n font: inherit; /* 2 */\n}\n\n/* Interactive\n ========================================================================== */\n\n/*\n * Add the correct display in Edge, IE 10+, and Firefox.\n */\n\n/*\n * Add the correct display in all browsers.\n */\n\n/* Misc\n ========================================================================== */\n\n/**\n * Add the correct display in IE 10+.\n */\n\ntemplate {\n display: none;\n}\n\n/**\n * Add the correct display in IE 10.\n */\n\n[hidden] {\n display: none;\n}\n\n/**\n * Manually forked from SUIT CSS Base: https://github.com/suitcss/base\n * A thin layer on top of normalize.css that provides a starting point more\n * suitable for web applications.\n */\n\n/**\n * 1. Prevent padding and border from affecting element width\n * https://goo.gl/pYtbK7\n * 2. Change the default font family in all browsers (opinionated)\n */\n\nhtml {\n box-sizing: border-box; /* 1 */\n font-family: sans-serif; /* 2 */\n}\n\n*,\n*::before,\n*::after {\n box-sizing: inherit;\n}\n\n/**\n * Removes the default spacing and border for appropriate elements.\n */\n\n\ndl,\ndd,\nh2,\nh3,\nh5,\np,\npre {\n margin: 0;\n}\n\nbutton {\n background: transparent;\n padding: 0;\n}\n\n/**\n * Work around a Firefox/IE bug where the transparent `button` background\n * results in a loss of the default `button` focus styles.\n */\n\nbutton:focus {\n outline: 1px dotted;\n outline: 5px auto -webkit-focus-ring-color;\n}\n\nol,\nul {\n list-style: none;\n margin: 0;\n padding: 0;\n}\n\n/**\n * Tailwind custom reset styles\n */\n\n/**\n * 1. Use the system font stack as a sane default.\n * 2. Use Tailwind\'s default "normal" line-height so the user isn\'t forced\n * to override it to ensure consistency even when using the default theme.\n */\n\nhtml {\n font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; /* 1 */\n line-height: 1.5; /* 2 */\n}\n\n/**\n * Allow adding a border to an element by just adding a border-width.\n *\n * By default, the way the browser specifies that an element should have no\n * border is by setting it\'s border-style to `none` in the user-agent\n * stylesheet.\n *\n * In order to easily add borders to elements by just setting the `border-width`\n * property, we change the default border-style for all elements to `solid`, and\n * use border-width to hide them instead. This way our `border` utilities only\n * need to set the `border-width` property instead of the entire `border`\n * shorthand, making our border utilities much more straightforward to compose.\n *\n * https://github.com/tailwindcss/tailwindcss/pull/116\n */\n\n*,\n*::before,\n*::after {\n border-width: 0;\n border-style: solid;\n border-color: rgb(232, 229, 239);\n border-color: var(--gray-300);\n}\n\n/**\n * Undo the `border-style: none` reset that Normalize applies to images so that\n * our `border-{width}` utilities have the expected effect.\n *\n * The Normalize reset is unnecessary for us since we default the border-width\n * to 0 on all elements.\n *\n * https://github.com/tailwindcss/tailwindcss/issues/362\n */\n\ntextarea {\n resize: vertical;\n}\n\ninput::-webkit-input-placeholder,\ntextarea::-webkit-input-placeholder {\n color: inherit;\n opacity: 0.5;\n}\n\ninput::-moz-placeholder,\ntextarea::-moz-placeholder {\n color: inherit;\n opacity: 0.5;\n}\n\ninput:-ms-input-placeholder,\ntextarea:-ms-input-placeholder {\n color: inherit;\n opacity: 0.5;\n}\n\ninput::-ms-input-placeholder,\ntextarea::-ms-input-placeholder {\n color: inherit;\n opacity: 0.5;\n}\n\ninput::placeholder,\ntextarea::placeholder {\n color: inherit;\n opacity: 0.5;\n}\n\nbutton,\n[role="button"] {\n cursor: pointer;\n}\n\n\nh2,\nh3,\nh5 {\n font-size: inherit;\n font-weight: inherit;\n}\n\n/**\n * Reset links to optimize for opt-in styling instead of\n * opt-out.\n */\n\na {\n color: inherit;\n text-decoration: inherit;\n}\n\n/**\n * Reset form element properties that are easy to forget to\n * style explicitly so you don\'t inadvertently introduce\n * styles that deviate from your design system. These styles\n * supplement a partial reset that is already applied by\n * normalize.css.\n */\n\nbutton,\ninput,\nselect,\ntextarea {\n padding: 0;\n line-height: inherit;\n color: inherit;\n}\n\n/**\n * Use the configured \'mono\' font family for elements that\n * are expected to be rendered with a monospace font, falling\n * back to the system monospace stack if there is no configured\n * \'mono\' font family.\n */\n\npre,\ncode {\n font-family: SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;\n}\n\n/**\n * Make replaced elements `display: block` by default as that\'s\n * the behavior you want almost all of the time. Inspired by\n * CSS Remedy, with `svg` added as well.\n *\n * https://github.com/mozdevs/cssremedy/issues/14\n */\n\n\nsvg,\ncanvas {\n display: block;\n vertical-align: middle;\n}\n\n/**\n * Constrain images and videos to the parent width and preserve\n * their instrinsic aspect ratio.\n *\n * https://github.com/mozdevs/cssremedy/issues/14\n */\n\n:root {\n --white: rgb(255, 255, 255);\n --blue-400: rgb(122, 122, 255);\n --green-100: rgb(227, 255, 242);\n --green-300: rgb(148, 242, 200);\n --green-400: rgb(114, 224, 175);\n --green-500: rgb(34, 212, 146);\n --purple-100: rgb(251, 245, 255);\n --purple-200: rgb(236, 211, 253);\n --purple-300: rgb(214, 188, 250);\n --purple-400: rgb(183, 148, 244);\n --purple-500: rgb(121, 0, 245);\n --purple-600: rgb(113, 7, 220);\n --purple-800: rgb(79, 15, 143);\n --red-100: rgb(255, 235, 243);\n --red-300: rgb(250, 133, 162);\n --red-400: rgb(250, 78, 121);\n --yellow-100: rgb(255, 253, 235);\n --yellow-200: rgb(255, 248, 196);\n --yellow-300: rgb(255, 243, 148);\n --yellow-400: rgb(255, 234, 79);\n --tint-50: rgba(0, 0, 150, 0.015);\n --tint-100: rgba(0, 0, 150, 0.025);\n --tint-200: rgba(0, 0, 100, 0.07);\n --tint-300: rgba(25, 0, 100, 0.1);\n --tint-400: rgba(20, 0, 100, 0.2);\n --tint-500: rgba(30, 20, 90, 0.35);\n --tint-600: rgba(30, 20, 70, 0.5);\n --tint-700: rgba(15, 10, 60, 0.75);\n --gray-50: rgb(252, 252, 253);\n --gray-100: rgb(247, 247, 252);\n --gray-200: rgb(238, 238, 245);\n --gray-300: rgb(232, 229, 239);\n --gray-400: rgb(209, 204, 224);\n --gray-500: rgb(176, 173, 197);\n --gray-600: rgb(142, 137, 162);\n --gray-700: rgb(75, 71, 109);\n --gray-800: rgb(51, 47, 81);\n /* dark theme */\n --dark-white: rgb(38, 38, 50);\n --dark-blue-400: rgb(85, 0, 255);\n --dark-green-100: rgb(32, 97, 90);\n --dark-green-300: rgb(55, 111, 123);\n --dark-green-500: rgb(63, 152, 142);\n --dark-purple-100: rgb(60, 46, 96);\n --dark-purple-200: rgb(81, 50, 128);\n --dark-purple-300: rgb(104, 85, 147);\n --dark-purple-400: rgb(106, 87, 148);\n --dark-purple-500: rgb(126, 107, 167);\n --dark-purple-600: rgb(145, 127, 183);\n --dark-purple-800: rgb(158, 140, 194);\n --dark-red-100: rgb(255, 235, 243);\n --dark-red-300: rgb(250, 133, 162);\n --dark-red-400: rgb(250, 78, 121);\n --dark-yellow-100: rgb(61, 57, 49);\n --dark-yellow-200: rgb(90, 78, 53);\n --dark-yellow-300: rgb(119, 103, 70);\n --dark-yellow-400: rgb(145, 121, 90);\n --dark-tint-50: rgba(240, 240, 245, 0.05);\n --dark-tint-100: rgba(240, 240, 245, 0.075);\n --dark-tint-200: rgba(240, 240, 245, 0.1);\n --dark-tint-300: rgba(240, 240, 245, 0.125);\n --dark-tint-400: rgba(240, 240, 245, 0.25);\n --dark-tint-500: rgba(240, 240, 245, 0.45);\n --dark-tint-600: rgba(240, 240, 245, 0.55);\n --dark-tint-700: rgba(240, 240, 245, 0.65);\n --dark-gray-0: rgb(30, 30, 40);\n --dark-gray-50: rgb(38, 38, 50);\n --dark-gray-100: rgb(48, 48, 58);\n --dark-gray-200: rgb(51, 51, 65);\n --dark-gray-300: rgb(75, 75, 85);\n --dark-gray-400: rgb(142, 142, 160);\n --dark-gray-500: rgb(152, 152, 170);\n --dark-gray-600: rgb(165, 165, 175);\n --dark-gray-700: rgb(216, 216, 223);\n --dark-gray-800: rgb(230, 230, 235);\n --dark-shadow-sm: \'0 2px 0 var(--
Raw HTTP request used to retrieve the page.
GET / HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:18:50 GMT
Location: /login
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='/login'" />
<title>Redirecting to /login</title>
</head>
<body>
Redirecting to <a href="/login">/login</a>.
</body>
</html>
server
using
POST
at
http://b3789e93786d.ngrok.io/admin/permissions
pointing to
http://b3789e93786d.ngrok.io/admin/permissions
.
| Type | In | Action |
|---|---|---|
server |
http://b3789e93786d.ngrok.io/admin/permissions | http://b3789e93786d.ngrok.io/admin/permissions |
Raw HTTP request used to retrieve the page.
POST /admin/permissions HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Referer: http://b3789e93786d.ngrok.io/admin/permissions/create Origin: http://b3789e93786d.ngrok.io Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryNL2M2X2E0LRxzc4t Content-Length: 269 Cookie: XSRF-TOKEN=eyJpdiI6InVlcGxBbzhJYWF6QjhReFJRZzk5aXc9PSIsInZhbHVlIjoiUmloRHlNNW1xbFVDRFNQTzNiWDNNT3psS25TM0N2SG9pSUhSU05mZUJEdTQrK1wvdVlVTEVUNmxEdWdrWHQ1MGVaTFU1dHRJR0VqcHg4WWVoUGxBamVFejRuVGk5QkNtUTdZVW1xVm03WDI3cmpINTBwMDJna1JReXNyZmxhXC93MiIsIm1hYyI6IjBjZjM4MmQyMTE1ZmRjOTM2OGJjYmM4YWYyNTQ3NDU2YzdiYWZlYzM0NTdmOTBjN2YxOWMwMDNhNjc0ZjI2MzMifQ%3D%3D;laravel_session=eyJpdiI6InJRYW5TaTRHeHNwMExxeUtjTHRPQkE9PSIsInZhbHVlIjoiZzU3Y0xYZ05hZVZNYk5LSTdKVm5XeEcxQTZqTGs1Y1dzbDRSVGJJbWdISUNUQUwyekxLNlVNMU5pcldyU21ES0o4cGtkWkdCN1wvb0FBMTIzT25lQTlqSFgwVlwvK1QzZE1MUHl2NlhucXJWNzhZVjk1Nlcyb1ZRUE8wR2JxS2FhdSIsIm1hYyI6ImJjYjVhY2E1Yjc4NmFjNjE4M2IwYTAzNWM1ZmZhYjJmNDE5NTRjZGEzODk1ODdiN2I0OTZkNDkyZjE5ZjA1YmQifQ%3D%3D Accept-Language: en-US,* Host: b3789e93786d.ngrok.io ------WebKitFormBoundaryNL2M2X2E0LRxzc4t Content-Disposition: form-data; name="_token" SdA3YNqBGzGKvj3hngkMl8fZUzT7HSIjSPhkCCg2 ------WebKitFormBoundaryNL2M2X2E0LRxzc4t Content-Disposition: form-data; name="title" ------WebKitFormBoundaryNL2M2X2E0LRxzc4t--
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 13:41:17 GMT
Location: http://b3789e93786d.ngrok.io/admin/permissions/create
Set-Cookie: XSRF-TOKEN=eyJpdiI6IkRUNkU2WmpqVVZYVEJJd3ZLRnRTMHc9PSIsInZhbHVlIjoiOEwxTFh0OVpBbzI4UEtcL3k4Tm95RkVMZWV2ak8wS0xWU0h2djQ0RDZjXC8rMEVManpsVFQrZSt4WU5YOXc1ZTBLSDc3clwvUk53TmxqeFF2RytseStHdTU5dUVUcEZUcTJJS1F6MWpcLzNkaHlxTlpFcXVZQzlLb3haNjUxNG9tRm14IiwibWFjIjoiZDFkODE3Y2I3NjZkZDg2YTJiYzEzZDNmMTQ1YzBiZTRmNTE3ZGE1Y2VmNTNmNDJlZmY5NmE3NDFiNTNmNGQyMyJ9; expires=Mon, 02-Nov-2020 15:41:17 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6Ild4V2VjYnZcL2RPWGxwdzRBcTQyQWh3PT0iLCJ2YWx1ZSI6IlpIUEVqSWxSZzI1ZUV6ejNybmdsNG02bE9vbkNoQ01IWmczXC9icXl1R3FVeXEzU0c5cUpsZjcwTlo5TkVmWUVLTlVWMXlTWnV1SWpDNTA3MldwN2J5ZlNSdUVSMEVnZHFLWVFiXC9QS1dWYnVxcGNlMUQ0WHV4Z3I1bGp5NmxsQjEiLCJtYWMiOiI5YjgxZTI3OTAxZWUwMmMwNzhlMWRjYzljODJlY2QxZGJhNmM4YWZmM2I3MDUzNDZiYTgwNTJhYmYzYjkzNjg5In0%3D; expires=Mon, 02-Nov-2020 15:41:17 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='http://b3789e93786d.ngrok.io/admin/permissions/create'" />
<title>Redirecting to http://b3789e93786d.ngrok.io/admin/permissions/create</title>
</head>
<body>
Redirecting to <a href="http://b3789e93786d.ngrok.io/admin/permissions/create">http://b3789e93786d.ngrok.io/admin/permissions/create</a>.
</body>
</html>
Raw HTTP request used to retrieve the page.
GET / HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:18:50 GMT
Location: /login
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='/login'" />
<title>Redirecting to /login</title>
</head>
<body>
Redirecting to <a href="/login">/login</a>.
</body>
</html>
server
using
POST
at
http://b3789e93786d.ngrok.io/admin/permissions/1
pointing to
http://b3789e93786d.ngrok.io/admin/permissions/1
.
Raw HTTP request used to retrieve the page.
POST /admin/permissions/1 HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Referer: http://b3789e93786d.ngrok.io/admin/permissions/1/edit Origin: http://b3789e93786d.ngrok.io Content-Type: multipart/form-data; boundary=----WebKitFormBoundarysKuG0H3ittjkT99Y Content-Length: 388 Cookie: XSRF-TOKEN=eyJpdiI6IjVqamxGTVRlaVpXVHdxeERmWEZuTlE9PSIsInZhbHVlIjoiZVJHUGpWaHBiemszdnQ4bnd6WFgzNTU0ZUFibUFVSitzQTVqVVdoN0tXXC9cLzdUZmRRT09WVHZuTHU5Z0xuaWZkZ2x4ZXFRZnE4a2pEZU83dVJDTTVmdjZXTmdxTyt3Y29nUytDZHZ3YUtnaTVzaEoxSWNcL1hTSG41U3k0N05EdjAiLCJtYWMiOiI3ODFlNDljNjEwY2UwMzQxZWMyYWIzYWFlMjA2N2FmOGUwOGYwYTE2MjVlYzZkZjU5ZDg1YzdhODc3MmZlYmQwIn0%3D;laravel_session=eyJpdiI6IlRHblZoU3kxczBzaVBsU0ZPU2VpckE9PSIsInZhbHVlIjoiNVNzeDA4TUZRVFVpZUxROTdrSTB3Sm84bm1aTGhFc0lhTmRjQVwvOWc3aXliUXkwVUxxaFB6MmdWM1l3WVhtTUxQQTFYOFF5NWtVWjVocCsyUUd0QnpQdGxBMXA5TFo3ZkNNQ0oxRGRmdU1qSm5FcXFkVkR2UlA1VUNPRkRHendCIiwibWFjIjoiMjMxNGE2MTJiYWYzNjU0MzdjYjM4YThlYTFkMjQ3ZTZlMjFjZWVlZTE1NGRhYTQ3ODRlYjYzMTY0OWFjMjQxMSJ9 Accept-Language: en-US,* Host: b3789e93786d.ngrok.io ------WebKitFormBoundarysKuG0H3ittjkT99Y Content-Disposition: form-data; name="_token" hTawC0Yfr4UP2G7uMvigZ2LukxZCHf7dd0UK9GdB ------WebKitFormBoundarysKuG0H3ittjkT99Y Content-Disposition: form-data; name="_method" PUT ------WebKitFormBoundarysKuG0H3ittjkT99Y Content-Disposition: form-data; name="title" user_management_access ------WebKitFormBoundarysKuG0H3ittjkT99Y--
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 13:42:14 GMT
Location: http://b3789e93786d.ngrok.io/admin/permissions
Set-Cookie: XSRF-TOKEN=eyJpdiI6IlpQemc2clMrbW4rWjVhVHErMHJiRlE9PSIsInZhbHVlIjoib2VmUnhhNXlKblRXZWhKZ3ZvZFZIUjhOdm9SUHc3b1d0dHJkR2xiK2JjRW9ST0U3cXNzV0RNQ3VOTzVKcEJqaWVpZXlyZU5yRXJMbWd3OWRmeVhDS1pRYWJDZGlGdTRUbG5hTWh2YVpnV2cwNldZMTFtT2tuNElYd2llM0xVZFciLCJtYWMiOiJkNzY2MTI3MWQ5ZjM1ZTJiMjg5MWI4MzZiNjA4MGI3OThkMGIzN2Q5NWM1MDYwNTYxMjY2MzMxNzlkYzQ3NzE2In0%3D; expires=Mon, 02-Nov-2020 15:42:14 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6Inlna283OUgyR0VBYVlkNWR1OVg0MFE9PSIsInZhbHVlIjoiZ3B0Y3NRekFuNTZ5ME9cLzdQODd5R1FKY2pMU0FZXC9NemNVMUtGbXlhTE14VUF5dlpncE5vdFI3SFZUU0c0dWdUNHZadnkrbGg4dktlMVRCSXRPWkJpSnRON01lMGFYZUg0TkduVmp0TnJPZ3JCV0twSVRHUVVTRVJ0bHZUdTVZZCIsIm1hYyI6IjZlYmY1NzY1NmEwM2IxNjc3MTZhOTAzYjc3OTc5MzY5NzM4YTcyZjAwM2JkOTczZjU4Y2JmNTJjNDMyMDBiZmEifQ%3D%3D; expires=Mon, 02-Nov-2020 15:42:14 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='http://b3789e93786d.ngrok.io/admin/permissions'" />
<title>Redirecting to http://b3789e93786d.ngrok.io/admin/permissions</title>
</head>
<body>
Redirecting to <a href="http://b3789e93786d.ngrok.io/admin/permissions">http://b3789e93786d.ngrok.io/admin/permissions</a>.
</body>
</html>
Raw HTTP request used to retrieve the page.
GET / HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:18:50 GMT
Location: /login
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='/login'" />
<title>Redirecting to /login</title>
</head>
<body>
Redirecting to <a href="/login">/login</a>.
</body>
</html>
server
using
POST
at
http://b3789e93786d.ngrok.io/admin/roles
pointing to
http://b3789e93786d.ngrok.io/admin/roles
.
| Type | In | Action |
|---|---|---|
server |
http://b3789e93786d.ngrok.io/admin/roles | http://b3789e93786d.ngrok.io/admin/roles |
Raw HTTP request used to retrieve the page.
POST /admin/roles HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Referer: http://b3789e93786d.ngrok.io/admin/roles/create Origin: http://b3789e93786d.ngrok.io Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryAyGALzWqDJRhAhcB Content-Length: 269 Cookie: XSRF-TOKEN=eyJpdiI6IlN1SXBcL1FvZmc5M05rYjRlU29lWnhBPT0iLCJ2YWx1ZSI6InR4UHBaXC9mTUlGNkxIb29VT1RkcFB1TFd2cWRtdStuWGVGSGVzS1VyU0F2dVdqOEF3VGpNK0VGWkVCVEJZVDdGZGV1VjJaV1wveWVoWTczTStOMTZUZXBtblNPRklcLytTV0szWmtlUzBqeG1jcHV5MEY2WnV3bzEwS0VweCtCYWdhIiwibWFjIjoiN2JjYjkzZmJjZmViYzdlZDhmMTMxNTQ3ZThhM2VlYTA5NjNlZTIwNzFmMWE3YjU0ZmY4OTg2YWQxZjI4ZjAyNCJ9;laravel_session=eyJpdiI6ImFUSFBhUXlqUkJSZzBlQ090VTZoR3c9PSIsInZhbHVlIjoiQlQ2UEY0ZnExV085RXJNdVNEb2JSQ0NFM1AzaEdZXC9Ma1J2VUJ5T292eDhlcDdHXC93R3FNOFQ3SW52YTVyR0pZeCtURGlBbmZaTkZkZzBhUmhRU3lUWjNXM3ZCWWlYUGZERk12eTJPNmpuTFV1andxVHlFVitWdlZvM0xNVUVDRSIsIm1hYyI6Ijc4ZDRiNWFhZjQ1NTkyMTM5N2ZlNjc2NTZkYTY0MGIxNzUyYjJlZmIyZTExMWMwN2I0YzAxNzI5MTJiYTg1ZjkifQ%3D%3D Accept-Language: en-US,* Host: b3789e93786d.ngrok.io ------WebKitFormBoundaryAyGALzWqDJRhAhcB Content-Disposition: form-data; name="_token" j5tgnP92kTtjZ9Nf0kpFr4XQYUat3lF9nIyQwlVg ------WebKitFormBoundaryAyGALzWqDJRhAhcB Content-Disposition: form-data; name="title" ------WebKitFormBoundaryAyGALzWqDJRhAhcB--
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 14:25:47 GMT
Location: http://b3789e93786d.ngrok.io/admin/roles/create
Set-Cookie: XSRF-TOKEN=eyJpdiI6InZwWndXQjF1NmRNT1phS1NaTXJIbFE9PSIsInZhbHVlIjoiRGI4NjZsbkJIUVlFWjFBc2FGYTViXC9DSDlSdDNVU25TaDg2aGJualwvTVh1eGppSUkxckZzU0htM3BTanA5QVYwWVhuV0pxcUQrMVlsWVFhcHNieUlcL0p2NUFFVW1yRkJRUWZkQVhDZWJxY0pBR0krc3BvcFIzbmVRN29NODcwcHUiLCJtYWMiOiI3OWU5ZWQ5ZmUyMTI3Y2E4NWY2ZDUzYmEwMDIzZGY2N2MyOTYzYTQzOTE4MGU1NjhiZDFmN2NkNDU1YjI2Y2ExIn0%3D; expires=Mon, 02-Nov-2020 16:25:47 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6IkUxV0Y2WHhNbjJ3TGt2dUFSUnlZMXc9PSIsInZhbHVlIjoia3JFb2ZaUUNsQUUyMmo4cVE4eERxeStpVHYwVTU4TGI3RjdcL2dMd1RSK3o2djBLSHBJV3NvMTAwTnJ2MzZrSUdibGlGU01WWnhCMUxvZXE2THRNQTFGRWphTGk4eDVSQ0dcLzZZXC93bnBNZ2RJZVVFN1hCdnlSeDJ0cE0rRGdrQTkiLCJtYWMiOiI5YzgwNGJmMzk1NmE0ZjFjMmQzMDQxYzM0MWEzZmIwMDY4YTJmNGQyNTVhOGJjNTJlMjA2NGZkYmY1YWYyNzE3In0%3D; expires=Mon, 02-Nov-2020 16:25:47 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='http://b3789e93786d.ngrok.io/admin/roles/create'" />
<title>Redirecting to http://b3789e93786d.ngrok.io/admin/roles/create</title>
</head>
<body>
Redirecting to <a href="http://b3789e93786d.ngrok.io/admin/roles/create">http://b3789e93786d.ngrok.io/admin/roles/create</a>.
</body>
</html>
Raw HTTP request used to retrieve the page.
GET / HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:18:50 GMT
Location: /login
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='/login'" />
<title>Redirecting to /login</title>
</head>
<body>
Redirecting to <a href="/login">/login</a>.
</body>
</html>
server
using
POST
at
http://b3789e93786d.ngrok.io/admin/users
pointing to
http://b3789e93786d.ngrok.io/admin/users
.
| Type | In | Action |
|---|---|---|
server |
http://b3789e93786d.ngrok.io/admin/users | http://b3789e93786d.ngrok.io/admin/users |
Raw HTTP request used to retrieve the page.
POST /admin/users HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Referer: http://b3789e93786d.ngrok.io/admin/users/create Origin: http://b3789e93786d.ngrok.io Content-Type: multipart/form-data; boundary=----WebKitFormBoundary9YyCqZ9eUD838dgZ Content-Length: 455 Cookie: XSRF-TOKEN=eyJpdiI6IkwrdE9na1JCUWl5TlBZaytQMEZsOUE9PSIsInZhbHVlIjoiXC9rTm1ZQSt3SFlBUFcySW5PaVJsWEI1VDBxQ0lIZ01MSHJTSVUrYnBSelFZZW5xaEV2ODJnSTBicWNLQUppdEw4b3oxK0d6ZTlqTlwvZFNnSGFEMW9xYnFDeVlnY3g2QUtRZU5BMlcwWWZlXC9wb0JoZnozc1lJWmE0cHlYNmgxa3QiLCJtYWMiOiIwODJkNTk4NjliMWU0ZGI3NmY1YmQzNmZiZGNhZDBmNWE4MDNiYjY1MTViMWVlZTRkMWI0Mzc1ODVlZjQ0NDkwIn0%3D;laravel_session=eyJpdiI6IkJcL2dJUEZ5Tm8rMlliTXNOeFhNcFJ3PT0iLCJ2YWx1ZSI6ImN0QThYeUZZcWNhRnQycEhqXC9QalM3dXZVaXpwajFFM2trejdIRU9rbHlZYXZHcGRPWDZyYmxad0Fmd2pZaTlPT3hqR1wvN1ppYlYyaFZxNEE0YkZMcEdiK2JWeHU0SW5lSEg0RTdtMmxsR2drT2c3SlNyTTJ6UzJPS2FuK0pLc3MiLCJtYWMiOiI1NDgyODJkYjRjZWMwODZiNTUwMTlkNzE1Mzg1ZjUwNTExYzg3MDQzOGQ5MzhjYmMyOTVkNTc1OGQyNzFkZTE3In0%3D Accept-Language: en-US,* Host: b3789e93786d.ngrok.io ------WebKitFormBoundary9YyCqZ9eUD838dgZ Content-Disposition: form-data; name="_token" iDBeU9XAy7SaN5uftCe88zw0Jq5FVDzUg7rxsHRJ ------WebKitFormBoundary9YyCqZ9eUD838dgZ Content-Disposition: form-data; name="name" ------WebKitFormBoundary9YyCqZ9eUD838dgZ Content-Disposition: form-data; name="email" ------WebKitFormBoundary9YyCqZ9eUD838dgZ Content-Disposition: form-data; name="password" ------WebKitFormBoundary9YyCqZ9eUD838dgZ--
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 14:27:59 GMT
Location: http://b3789e93786d.ngrok.io/admin/users/create
Set-Cookie: XSRF-TOKEN=eyJpdiI6InRJVEFUVU9vN09ZZEt2NmxDWjdoZnc9PSIsInZhbHVlIjoiQk9PbVRjRVI0cmxoRTlZbDNuU241UG9uSlhGbm5GSHFTcmYrYjVJVGZJTUpCM0pwZHRJU0VpNVlcL0d6UWNPTlZaUG1ZUytiQm0xM1pKbHN1U0ptaUZaMm1pc1ozSzdsZ3cxNUJ2ZXVpZHFoM2RUU01LbVQ2cjNya1NyMk5PVUVWIiwibWFjIjoiMTAxNTYzMzljZmY3M2NhNGI1ZGY4ZTZhMTEyYzJjZTk2OTY5YzU1ZWE0ZDJlMjVjYmFhODc1YmQxZGYyN2VmZCJ9; expires=Mon, 02-Nov-2020 16:27:59 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6IjlGUzdvbmhGZ0FMbDhQOTN0Uko3T2c9PSIsInZhbHVlIjoidkRCZE1LeEh2RXU1aUZCeFNlRG5hd21sS3FNVk5XV0FXZXNlcHNvcndXTUtObW14SzhOVFhSdnVRYlk1VEthXC82TktDVEE0TXhkSU5lMVlyS0F5ZXFWXC9zMW52R2p2YVFudWVkUnhJbmhGQ3JwOHQ3bzJYR0JpN3phN0x1VW1qeiIsIm1hYyI6ImI2NGY0MjhmYzYwYWNkYzEzMTI1NTNmNDg5NTk2ZGU0MWNjMDI5YmNhMTU0NzNlNjZmZDI2YTE0YWFmYTdlZDkifQ%3D%3D; expires=Mon, 02-Nov-2020 16:27:59 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='http://b3789e93786d.ngrok.io/admin/users/create'" />
<title>Redirecting to http://b3789e93786d.ngrok.io/admin/users/create</title>
</head>
<body>
Redirecting to <a href="http://b3789e93786d.ngrok.io/admin/users/create">http://b3789e93786d.ngrok.io/admin/users/create</a>.
</body>
</html>
Raw HTTP request used to retrieve the page.
GET / HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:18:50 GMT
Location: /login
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='/login'" />
<title>Redirecting to /login</title>
</head>
<body>
Redirecting to <a href="/login">/login</a>.
</body>
</html>
server
using
GET
at
http://b3789e93786d.ngrok.io/admin/services/Copy%20of%20Copy%20of%20services./ab1eb814e8cb92c02ca86ed02a582b7ba2f5c864
pointing to
http://b3789e93786d.ngrok.io/admin/services/Copy%20of%20Copy%20of%20services./ab1eb814e8cb92c02ca86ed02a582b7ba2f5c864
.
http://b3789e93786d.ngrok.io/admin/services/Copy%20of%20Copy%20of%20services./ab1eb814e8cb92c02ca86ed02a582b7ba2f5c864
Raw HTTP request used to retrieve the page.
GET /admin/services/Copy%20of%20Copy%20of%20services./ab1eb814e8cb92c02ca86ed02a582b7ba2f5c864 HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6Ilp2WjRLeHVlaDdnS3ZEUEswMVVWRHc9PSIsInZhbHVlIjoibmNcL0VMWVFMUEFVTk1laFFPV2ZKSDVpVkN0TndwUnJBUjlpOXZJR25lUENkSlhvdk1UUE8zS0pXZUxabURWdHhFbGJkZjJSQ2xUK0dQcUxqNGNBXC9icXZGRXlORG10QXAzckh3ZXlJbU9UbVF3dERBaXZXWXFmTDRFOFUwNEJkKyIsIm1hYyI6IjU3NmM3ZTU5NzRjMjRmZDlhNGNiNjBjMDFlY2VhOWE4MGZkMGEyOGU4ZDE4ODI0YjNiYjdjZTBiNGZmNjFkOGQifQ%3D%3D;laravel_session=eyJpdiI6Ik1CV0p5cVkzQWtpelZCdGF6N1VBNnc9PSIsInZhbHVlIjoiT1dHaEs2d05adUphMTV6Z0tveUtrdlwveTJENmJBRjh4a001SHQxUDRaOUlDSWhzSVVVdU16aGlzVWRXd2lCMHlnUFgzYm8wVWdnUThZUVRkMk9PXC9cLys4Rmd2NmROeFRZdnpYZVcwUHlWOHFKbGxlOFlMb0hHdnBzZUNSeHc0bTUiLCJtYWMiOiJjMDkyODc0ZGYyMDdmNDMwNWNjZWM5ZjRiNTQ3ZGM5NTQ4YjkxMDA0N2ZiYTMzZTA4OTA0YzI5NGM0YzcwMzczIn0%3D
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 502 Bad Gateway
Server: nginx/1.15.8
Date: Mon, 02 Nov 2020 12:20:18 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 157
<html>
<head><title>502 Bad Gateway</title></head>
<body>
<center><h1>502 Bad Gateway</h1></center>
<hr><center>nginx/1.15.8</center>
</body>
</html>
Raw HTTP request used to retrieve the page.
GET / HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:18:50 GMT
Location: /login
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='/login'" />
<title>Redirecting to /login</title>
</head>
<body>
Redirecting to <a href="/login">/login</a>.
</body>
</html>
server
using
PUT
at
http://b3789e93786d.ngrok.io/admin/services/Arachni-dc1fd3348d199f5e66655a1b9ebcc24e
pointing to
http://b3789e93786d.ngrok.io/admin/services/Arachni-dc1fd3348d199f5e66655a1b9ebcc24e
.
Raw HTTP request used to retrieve the page.
PUT /admin/services/Arachni-dc1fd3348d199f5e66655a1b9ebcc24e HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6IlhEZFJiZExFM3ZtUTNhSmM1NVNlS1E9PSIsInZhbHVlIjoiUjJYRENnZ2FBbjdENjNneE5JV0VkeCtxTkd3dnVxSDhoRXZ3TE5udDZ2S2IyQWU3aTViOUhOUWc4Sk5CbGtJTGRjU2UxOXNJRmd0YXZLcG9xREtuZVh3RnZNZFRGakxLV2cyQ1dXR1JzaG1KODFJNUdseHltZnVXSmc0aFFKUUIiLCJtYWMiOiI4OTA5ZjQzYzM2M2I5NjU3YzA3YTY1OGJjMmUzNDhhMmI2MmY5MDIzYjgwYWE3NDlhMGM2Njk4OWFmNzM2OGZjIn0%3D;laravel_session=eyJpdiI6IlMrTDZvdlJPajRSY2lROVwvaDM5VDZnPT0iLCJ2YWx1ZSI6InV3emtEbnh6MjBlZUpkUW41MjdWTkpST2lzXC9UYno3ekMyVE9mTThCSEZrb0VOYlZMY3hudDA5aGRGTVh5NkR4c3hHMmg5YlJRQ2FPSm9CaE1kR3Uwcko1Szl5M0RjUE50YnZMWURiM0RmdEpXc1VLOVlSTm85TWNJSWRDbTIwOCIsIm1hYyI6ImQ4ZjVjMDdjZTUwYjdmZTc4YjdjYWQwNDhkZThlNjQ4MWYzMmNjMWZjYjcwMDg1NDVmMGEzNTRlNWNmZDFjYmYifQ%3D%3D Content-Length: 55 Expect: 100-continue Created by Arachni. PUTdc1fd3348d199f5e66655a1b9ebcc24e
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 100 Continue
HTTP/1.1 419 unknown status
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
date: Mon, 02 Nov 2020 12:20:16 GMT
Set-Cookie: laravel_session=eyJpdiI6Ik4xSkFQQ1wvQ2d0MXU4OFVTV1d3bFR3PT0iLCJ2YWx1ZSI6ImxmcjlkbGhnQVZBUHBnWlVweUxaS1hGalwvTDUzU0V1XC9LSmdoRWREODM4YVwvZUU1b1gwTmlFcmcrV0N4YTlnOXlLTXcrTWU1dFhMbHNXT3NteGpcL0tqa1F0b0U1UE1WNGtuWVBWK3ZCb3c0Z2xaRzdidElDOHZyNmVTMGVqcXJ0cCIsIm1hYyI6IjkyNzE2ODI1YzVlNjYzODM2MTFlMDZmMDcwZWNjNjgzZGYwNjcyODQ0NmRiMzZmNWZkY2E4YzUwZjk2MGE0ZWEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:20:16 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Page Expired</title>
<!-- Fonts -->
<link rel="dns-prefetch" href="//fonts.gstatic.com">
<link href="https://fonts.googleapis.com/css?family=Nunito" rel="stylesheet">
<!-- Styles -->
<style>
html, body {
background-color: #fff;
color: #636b6f;
font-family: 'Nunito', sans-serif;
font-weight: 100;
height: 100vh;
margin: 0;
}
.full-height {
height: 100vh;
}
.flex-center {
align-items: center;
display: flex;
justify-content: center;
}
.position-ref {
position: relative;
}
.code {
border-right: 2px solid;
font-size: 26px;
padding: 0 15px 0 15px;
text-align: center;
}
.message {
font-size: 18px;
text-align: center;
}
</style>
</head>
<body>
<div class="flex-center position-ref full-height">
<div class="code">
419 </div>
<div class="message" style="padding: 10px;">
Page Expired </div>
</div>
</body>
</html>
Raw HTTP request used to retrieve the page.
GET / HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:18:50 GMT
Location: /login
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='/login'" />
<title>Redirecting to /login</title>
</head>
<body>
Redirecting to <a href="/login">/login</a>.
</body>
</html>
server
using
GET
at
http://b3789e93786d.ngrok.io/admin
pointing to
http://b3789e93786d.ngrok.io/admin
.
| Type | In | Action |
|---|---|---|
server |
http://b3789e93786d.ngrok.io/admin | http://b3789e93786d.ngrok.io/admin |
Raw HTTP request used to retrieve the page.
GET /admin HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Cookie: XSRF-TOKEN=eyJpdiI6IkFtQTN4MnE1SVwvRENYYkVscGI0cGpBPT0iLCJ2YWx1ZSI6IjltOHhpemEzYlY1VHROOWVqMmNKam9ncCtmdTZqN0pxSEJheFFocGllM2cxNW1FSG9JU0JiZGdoQyszOXZaRkdJY0I3SzZoSHkrT0tQVUl2TXBST0E0ZHFKQXFuZUdua3J0bmZQZ3hPaGRGeXRlb3VWUW9nZ21uZ3o1SlFYc0FrIiwibWFjIjoiNGI2MDVhNTlhMjUxM2Y5NDBmOGYwZDdjMTljMDZhOTJmZDljZWJiMDY0MjMwYzY4NmJjYWMxOWU1NzE2YTIxZCJ9;laravel_session=eyJpdiI6IjA3TDIzWlJTWVJzc2JOMkdcL2FhUTVRPT0iLCJ2YWx1ZSI6IlFUNk41ZHp0amsxa2NcL3RVZitQcHNDTFpGOTBtc3BsWW5xYWZOQ2ZXUlFcL2ZqMXUxVE9UbXlac0sxc2sxdDV5Qmx2OE52Mk1YMEFHYjVwbHZzV2NyUFoxVkZzT0UzVFRjdHdUNUFicGIrS3pMSE9LcXZVbHg0TDRlMjRpXC80a3krIiwibWFjIjoiZjE1OTk2ZjY4Y2U3NWI3MjI1Y2JiN2E5Mzc0ZTA4NGU4ZmVmNWQ2YWQ5ZDBkOTYxZjRhNThlMmU3ZWNlNDY3YiJ9 Accept-Language: en-US,* Host: b3789e93786d.ngrok.io
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:19:52 GMT
Location: http://b3789e93786d.ngrok.io/login
Set-Cookie: XSRF-TOKEN=eyJpdiI6InN2UVFcL1pTeFwvVU9VTDRrMGNXTGcrUT09IiwidmFsdWUiOiJKdDRIRVJqXC93bVBDa3ZJQVNKN0VWU0J4UExlQnd0azlKRUU0eVwvTkxIa1FMR2o3bnFNd2thRTRBeGpHS3JSOTJ0ZnEzaXBFQ1JMZm9XY204TG9WZEg3RnhYRTJrcUhzamNWTFF5R3l1M29TM29zekRLekUyUlJpS3I0c2UxK1ZhIiwibWFjIjoiMTY3ZjBhOWU3OGVmODdhMzUwNDllZWM4MDc3YzQ3MzkzMzVlNTBiOGUxMTdlMTVjZTA0YjNlZDczNzM5NDBjNyJ9; expires=Mon, 02-Nov-2020 14:19:52 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6IjdaMXhZN29kVVV6ZjRZeGV6TEZiNWc9PSIsInZhbHVlIjoiTUNSREZoMkdVeE1cL0hWcUJRZDB0aHBuXC9ZdzQ3a1k5MGRLR0ZaS2FQZWZoT3ZrNUlIdzg2Y29ya0pVeWtIWCtWNWpRZlNvUUliRTYyWWNCWnVMcHo0UVNRQ1hNXC80WFNMcVRwNm5xbWdQaGxFVHRPWit1QURlMytiWk51R1Y0em4iLCJtYWMiOiI2NmJjYmVkZTBhNDhmMzU2Y2I4YjhkZWRhOWQ3ZmU0YzMxMWRlNzBmYzkyODk0YzM0YzM2NjdlMjg3ZTYxMTA3In0%3D; expires=Mon, 02-Nov-2020 14:19:52 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='http://b3789e93786d.ngrok.io/login'" />
<title>Redirecting to http://b3789e93786d.ngrok.io/login</title>
</head>
<body>
Redirecting to <a href="http://b3789e93786d.ngrok.io/login">http://b3789e93786d.ngrok.io/login</a>.
</body>
</html>
Raw HTTP request used to retrieve the page.
GET / HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:18:50 GMT
Location: /login
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='/login'" />
<title>Redirecting to /login</title>
</head>
<body>
Redirecting to <a href="/login">/login</a>.
</body>
</html>
server
using
POST
at
http://b3789e93786d.ngrok.io/logout
pointing to
http://b3789e93786d.ngrok.io/logout
.
| Type | In | Action |
|---|---|---|
server |
http://b3789e93786d.ngrok.io/logout | http://b3789e93786d.ngrok.io/logout |
Raw HTTP request used to retrieve the page.
POST /logout HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Referer: http://b3789e93786d.ngrok.io/admin Origin: http://b3789e93786d.ngrok.io Content-Type: application/x-www-form-urlencoded Content-Length: 47 Cookie: XSRF-TOKEN=eyJpdiI6InpcL3ZsMlpZVjF6ZlcxeHlMWUVCNVd3PT0iLCJ2YWx1ZSI6IkM2eWpjSFdrTHUySXJ3MjJXTmhvMXBhNVZWMzFqcWdyNFVjcVlxcDVURllVK1lIVUwyMno5TE0yNElaZ0xEM1ZCUlVkc2RqQ2ZKWWFBVTQ4NHFIeDlPMHl3UEdZTU91NHFMZmEyNDVyMmt4VytCamVWWmp3dFc4R3YrZVhpMDY0IiwibWFjIjoiOTRmZWJkMDE1YmVkNDUxMzAwNGY0MTI1Y2Y0Yjk5N2Q0MGY2NzMwNWUzYjdlMWMwYjFjZjQ4YTJiZjE4YzliMSJ9;laravel_session=eyJpdiI6IkVHdVRVV1JKSVB5emhRQndCY1U4cUE9PSIsInZhbHVlIjoiVENTVTRqdkgrS096TlBQNmp0SkorOUV2KytTVUowakVsbW5Nd3lBQmVEeUdsTVlpTEJrR2ZFM1BhOWxKamQ2WXFpXC82NmlHWTNpWU5oV3ExZWdiTWE0SEdhbEFib1dsOEdST2p2RzNnbVBYY1BKT0ppaFNUb1R3QmdZbDRcLys1ZiIsIm1hYyI6IjY5NzQxMDFjNDhjZTA5ZTkyNjZkMDU2YzJhNTU1MDdiZGM1MjgwNmQ1NWRhZTNiM2M4MTEzNzViMjg2NzUyMzUifQ%3D%3D Accept-Language: en-US,* Host: b3789e93786d.ngrok.io _token=Mlxj8gs7SepUXph22uP6hq8EK2NQ1eBX0MdqsoTz
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:19:18 GMT
Location: http://b3789e93786d.ngrok.io
Set-Cookie: XSRF-TOKEN=eyJpdiI6Ik9tZmVZd2VuQVUzQmlVZmtERis5M0E9PSIsInZhbHVlIjoiclh6U2pzRzU0Mkw4aXpOOWRvdTNXNUVhT3JFTWNNSzJyVE14WDZBZXBqTEc0ZFBLS2VVclZBUzRleVhzekMzbDY1WEJ4SXI3Y1F5VDNoRUxocEREdDNidEJ4QnBuWjUxcEpJb1VBYjc1eWlKOUZISXJuWGlxN0tidG1GYUpESHgiLCJtYWMiOiI4M2VjZTU2NTE5NjhkNzViN2NlZTYzMTEzZTc3NTM5YWI2MDJlZTg1YWEyNWNlN2E4ODZjYjE4NTUyMGJmZjc3In0%3D; expires=Mon, 02-Nov-2020 14:19:18 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6IlwvVVwvRVNuU2hXKzcxbExMZ1VHaDBFdz09IiwidmFsdWUiOiJZbHFONEZ3d3R3bSt4dHBUR2RCRnNXZ0R2VnQ1WTc0WmxzaU1UZVRGKzRsSmd3SFIwaUpBNWpGYnJZS3I3VUFxdEVpZ3ZSVjBKM2JSZTZSTGdrUkZqb2pZOXl2em1hWmU5RHFvT2FESmI4MUI1ZE9XOCs3bnlqZTdLMUpZcks4QiIsIm1hYyI6IjZmODgwMjNjMzJjMDQ1NmQyYmVjNzJlYjg1YTcwYmJkYjIyMjUwMGQwZjAwM2E3NjU3OTY5ZGM0MzQxYzA3ZjkifQ%3D%3D; expires=Mon, 02-Nov-2020 14:19:18 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='http://b3789e93786d.ngrok.io'" />
<title>Redirecting to http://b3789e93786d.ngrok.io</title>
</head>
<body>
Redirecting to <a href="http://b3789e93786d.ngrok.io">http://b3789e93786d.ngrok.io</a>.
</body>
</html>
Raw HTTP request used to retrieve the page.
GET / HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:18:50 GMT
Location: /login
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='/login'" />
<title>Redirecting to /login</title>
</head>
<body>
Redirecting to <a href="/login">/login</a>.
</body>
</html>
server
using
GET
at
http://b3789e93786d.ngrok.io/home
pointing to
http://b3789e93786d.ngrok.io/home
.
| Type | In | Action |
|---|---|---|
server |
http://b3789e93786d.ngrok.io/home | http://b3789e93786d.ngrok.io/home |
Raw HTTP request used to retrieve the page.
GET /home HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6IjZFQjMzNm5oVVhTcWFpZUtyZHlGVkE9PSIsInZhbHVlIjoiSjFlQUIrdTEyVW5lUGEyVXNcLzRJM1QwajY1TEF4ZFY3OUFCRUo2UW9VWDE2dk1kTE1lRytZTWZIM3VianoyN0s3THJIRGVibkx5UzVKU1poOU4rV0xZNWlhNFVUYWxwVkZWMGVTNnBUZnF5VitaNXVUXC85Njcxdm1TdkZXZ1RTcSIsIm1hYyI6ImIxOWFhYTcxZDMwZTk2ODUzOTM5NzZhMWJkMDg0MjgyYjZjNWM5M2U0MTUzY2I5ZWIyZmRhOGNhMDk2ODRjNWYifQ%3D%3D;laravel_session=eyJpdiI6IlwvNHZ0Z3V1am9DVW9DYWh3dFpSMUh3PT0iLCJ2YWx1ZSI6ImVFY2tDa29IU3pXa2JRUEtvbzl3ZGdKMjZjVGpBOXVxcHZFZjFPeHhoQ3NydnJJa21mbHd1M3JpS1E1cHJENlZwbktuWjViXC92WTV1eUErTk5UaUR0WTFRcHNhT1ZvQlhBazl2aExDK0NBaStXb05DXC9XOEhCZGZKRGt4UmcxNFQiLCJtYWMiOiI5MDY2OTQ4OGQ5YjEzNzNkNmNiNTY4MGQ0MmRkZjZiMzU0ZmIyNmQwZjQyNTVmNGQ2ODNhNTE2Nzc2OWRhMmYyIn0%3D
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:18:57 GMT
Location: /admin
Set-Cookie: XSRF-TOKEN=eyJpdiI6IkpoSDd5SUh6RXd6bTRTeUx3c2RIWnc9PSIsInZhbHVlIjoiRDRNNTdnZFBSY2x4bHJDNm55MmVNWURlZTJpalVBbTh4UW9vRVdPMXorbnQranZRTzRhK3BBeEtcL1pEMWRESTlGd1p6Vk9RbzNLQjArZE55Um5iRU10OUFMNGd1MVZmSGRIWHh4aTBiQUJBTHBtVVNIUVZvYU91VmYwa1hyRGZHIiwibWFjIjoiMjQ2OTY2MTQ1OGIzZDE0MjU2ZDdkNmM1NjU5MmYzNGUxZDQyYTU0ODk4NzgwMTg5ZTRiYWU5ZGRkNjgzMmU0MyJ9; expires=Mon, 02-Nov-2020 14:18:57 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6ImRwTUYrVlpVOVdzTlpyQnZKRlRuSnc9PSIsInZhbHVlIjoiWUlrcjgydDZORXhQaHBJZ3haTlN0dnE5WWZ6aitiaURXMUpPYWlrSlZKUk5JSG41eGZreGd2MjZPdTZia2d4WGlDaDQ0VHZ4RkVIbk9JMnJaTEpNVmQwWGRUZXBKTGtGTHM1ZlkxYjd0RGpUdmlRWHBHRytMaDdkVzRvV09SbnMiLCJtYWMiOiI1NTY0ZWQ4YmI0ZDMzZWEyM2Q0ZWMyYjI1ZWVkZmIxYThkZThkMTMyMjgyMDBkY2M3ZWNkZWU4OWY5ZjMxN2UyIn0%3D; expires=Mon, 02-Nov-2020 14:18:57 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='/admin'" />
<title>Redirecting to /admin</title>
</head>
<body>
Redirecting to <a href="/admin">/admin</a>.
</body>
</html>
Raw HTTP request used to retrieve the page.
GET / HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:18:50 GMT
Location: /login
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='/login'" />
<title>Redirecting to /login</title>
</head>
<body>
Redirecting to <a href="/login">/login</a>.
</body>
</html>
server
using
OPTIONS
at
http://b3789e93786d.ngrok.io/
pointing to
http://b3789e93786d.ngrok.io/
.
| Type | In | Action |
|---|---|---|
server |
http://b3789e93786d.ngrok.io/ | http://b3789e93786d.ngrok.io/ |
Raw HTTP request used to retrieve the page.
OPTIONS / HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D;laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 405 Not Allowed
Server: nginx/1.15.8
Date: Mon, 02 Nov 2020 12:18:53 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 157
<html>
<head><title>405 Not Allowed</title></head>
<body>
<center><h1>405 Not Allowed</h1></center>
<hr><center>nginx/1.15.8</center>
</body>
</html>
Raw HTTP request used to retrieve the page.
GET / HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:18:50 GMT
Location: /login
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='/login'" />
<title>Redirecting to /login</title>
</head>
<body>
Redirecting to <a href="/login">/login</a>.
</body>
</html>
server
using
GET
at
http://b3789e93786d.ngrok.io/login
pointing to
http://b3789e93786d.ngrok.io/login
.
| Type | In | Action |
|---|---|---|
server |
http://b3789e93786d.ngrok.io/login | http://b3789e93786d.ngrok.io/login |
Raw HTTP request used to retrieve the page.
GET /login HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6IkhrdzZuNmdxZVYrNUdtbmlyNTQ5ZEE9PSIsInZhbHVlIjoiVFdwVVV3WWhGQ3hYbW9cL1pkVmI2cmFcL3dxTGFVN3R2Q0V5dW8rcFJTS0NJaThxTUJqU05KanlzeEIyVnRSVXFjeVc5V0YyRHJaTDNSeGV6S0FReVZqNHBXT21keDNpbXlQZlJEU2lUdFVsaTFPY2s4alY2eCtlOUZWYjRaczExTSIsIm1hYyI6IjMxZmEwZWI5ZDk5ZWYxN2MxMzM4ZDVkYjQ0NWY4ZTcxNWUyOWY2ODg5ZDEzYTJiMTA1NjFjZWM1NTY1YzVhZDQifQ%3D%3D;laravel_session=eyJpdiI6IjdzRUlzUnF5VTBkOGxUYW9IdStORnc9PSIsInZhbHVlIjoidytnRlRGZG0zcWhKZzhURG83dE5DeTF6MlRRRFBvVHhmSWdPc0hrbmRlVTJwcWVsZVZKTDk5ZWhVTDIzSHg0ODJVNTh4c0Q1YUJzUWpiS1BDeW93MjRrcGl6UzhJTzloN0wrVGxZR1BjdStSV3pNN1hKZVczazEyVXE3V243bmwiLCJtYWMiOiJlNzMwZjE0NWYwZmUyY2RmODBkZmFlNjQxYmY2NDcwM2MzODEyM2E2ZjkyNzUyMjBiZDc0ODZhMzgxMzI0NWUyIn0%3D
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:18:53 GMT
Location: http://b3789e93786d.ngrok.io/home
Set-Cookie: XSRF-TOKEN=eyJpdiI6ImM4RG00WE1oY2NQU0V6OUVEYVwvcWZRPT0iLCJ2YWx1ZSI6Im5zTFBKQyt5d0QxU05xell6ZVZaakFaSU5GaHFoWjlXV3Fac0RXd2N0Mkd4MVVUMk1KMUl1cUhWSFVDbm11T050c0xZckQzV1hDbDJXanUxNTI2SUZcL0l4TzhDMWhvUDg5Qm1wWlJTTEF2SXAxTWVBUnpZWGJKWnhSclczV0xHUCIsIm1hYyI6IjJkYzgyZjljMjlhNDlmYjFlMDA5NTMzMmUyMmE1MDMxMjRjZDc4MjJlY2U4NzQ1Y2QyYjdhM2I5Y2Q4ZWFjMjYifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:53 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6IlwvRjczVVBCajc3UjBIR051MXVhWmZBPT0iLCJ2YWx1ZSI6IjRpSmlFMFVvM1dGdzU3aVR4dTdmWmR5SkY4eEc4N1hlZ3p4SmJxNllESndtR2NJNmI5eWZGbE9tN1lqVnFwTDhjbVRqZjdEYlFQXC9Wc1ZwaXRXK2JzM1ErVE5LZDZOdHVjQ2xxUXgxaENDQm94dHhoTGo0Y3hYMmozUGFmcHlTbiIsIm1hYyI6IjI4NTcyNWZkZDYzZjRjOGFlZmJjNDkwNzhjYmRmNzQ0Mjk0M2U4OTg0OThhYWM5N2U2NTUyM2FjZDMxOTQ2N2UifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:53 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='http://b3789e93786d.ngrok.io/home'" />
<title>Redirecting to http://b3789e93786d.ngrok.io/home</title>
</head>
<body>
Redirecting to <a href="http://b3789e93786d.ngrok.io/home">http://b3789e93786d.ngrok.io/home</a>.
</body>
</html>
Raw HTTP request used to retrieve the page.
GET / HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:18:50 GMT
Location: /login
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='/login'" />
<title>Redirecting to /login</title>
</head>
<body>
Redirecting to <a href="/login">/login</a>.
</body>
</html>
These issues are considered untrusted (and may in fact be false
positives) because at the time they were identified the server was
exhibiting some kind of anomalous behavior or there was third party
interference (like network latency for example).
The listed issues need verification by a human.
A common practice when administering web applications is to create a copy/backup
of a particular directory prior to making any modification.
Another common practice is to add an extension or change the name of the original
directory to signify that it is a backup (examples include .bak, .orig, .backup,
etc.).
During the initial recon stages of an attack, cyber-criminals will attempt to locate backup directories by adding common extensions onto directories already discovered on the webserver. By analysing the response headers from the server they are able to determine if a backup directory exists. These backup directories can then assist in the compromise of the web application.
By utilising the same method, Arachni was able to discover a possible backup directory.
Do not keep obsolete versions of directories under the virtual web server root.
When updating the site, delete or move the directories to a directory outside the virtual root, edit them there, and move (or copy) the directories back to the virtual root. Make sure that only the directories that are actually in use reside under the virtual root.
Preventing access without authentication may also be an option and stop a client being able to view the contents of a directory6, however it is still likely that the filenames will be able to be discovered.
Using obscure filenames is only implementing security through obscurity and is not a recommended option.
server
using
GET
at
http://b3789e93786d.ngrok.io/admin/permissions/11%20(another%20copy)/
pointing to
http://b3789e93786d.ngrok.io/admin/permissions/11%20(another%20copy)/
.
System components have attached some insights to this issue.
| Proof |
|---|
HTTP/1.1 200 OK |
Raw HTTP request used to retrieve the page.
GET /admin/permissions/11%20(another%20copy)/ HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D;laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 200 OK
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:56:31 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6IklaREdBSzRTM3A4TzA4Z3phU1ZQZnc9PSIsInZhbHVlIjoiQzlEa3JNQ0ZnWGtuUFwvc0RVUUJ5a2ZhU0h0VkF3bDJMUXRzdTNRdTlPR05uXC9jOVBCQmlpdVRDcVZ6Nnk4dGxXWGxHenY3VzcxbjZpVnJtZWYrbjhxYXFuK2llMm9xRndWdEJaZGMraVwvaFJ6ZmhIVTVjMllleVVZOVJmXC9wTTVaIiwibWFjIjoiMGZhYWU0ZDQ4OWMxOWU3MjExM2QxYjJjOTU3M2RjMzRmYTA5ZTM3N2I5YjYzNDMyOGZlZGY5OTY2N2M5MGIyNyJ9; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6IlJsamR5TUxkVkdJcW14VHRsZzdEUXc9PSIsInZhbHVlIjoiVUw2SEx0SzRmM0VkWkdhTzU2WHlIVUpRTEdDbGdUT1ZwanNjMEJHSEJWMGNuSnV6T0phdmtzYVFQaFwvTlwvWFlGXC9jOEtnVWIrMERVZzRzYmJtN0lnVWs0V01JSVI0YUxzZHV3WWRBOVwvb1FFMFJiUE92MjB5VlAwR3BkSTZUK2MzIiwibWFjIjoiMzQ0MDViYTdmZjRjZWRjYTdlOWI0ZTg1NjRiMWZiMTNkZjhmZTRlNjIwZDQ1NjU1ZTQ0Y2YwYzNhMmM4YmJkMiJ9; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
<title>Appointments</title>
<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
<link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
<link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
</head>
<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
<header class="app-header navbar">
<button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
<span class="navbar-toggler-icon"></span>
</button>
<a class="navbar-brand" href="#">
<span class="navbar-brand-full">Appointments</span>
<span class="navbar-brand-minimized">Appointments</span>
</a>
<button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
<span class="navbar-toggler-icon"></span>
</button>
<ul class="nav navbar-nav ml-auto">
</ul>
</header>
<div class="app-body">
<div class="sidebar">
<nav class="sidebar-nav">
<ul class="nav">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
<i class="nav-icon fas fa-fw fa-tachometer-alt">
</i>
Dashboard
</a>
</li>
<li class="nav-item nav-dropdown">
<a class="nav-link nav-dropdown-toggle" href="#">
<i class="fa-fw fas fa-users nav-icon">
</i>
User management
</a>
<ul class="nav-dropdown-items">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
<i class="fa-fw fas fa-unlock-alt nav-icon">
</i>
Permissions
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
<i class="fa-fw fas fa-briefcase nav-icon">
</i>
Roles
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
<i class="fa-fw fas fa-user nav-icon">
</i>
Users
</a>
</li>
</ul>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Services
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Employees
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Clients
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Appointments
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
<i class="nav-icon fa-fw fas fa-calendar">
</i>
Calendar
</a>
</li>
<li class="nav-item">
<a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
<i class="nav-icon fas fa-fw fa-sign-out-alt">
</i>
Logout
</a>
</li>
</ul>
</nav>
<button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div> <main class="main">
<div style="padding-top: 20px" class="container-fluid">
<div class="card">
<div class="card-header">
Show Permissions
</div>
<div class="card-body">
<div class="mb-2">
<table class="table table-bordered table-striped">
<tbody>
<tr>
<th>
ID
</th>
<td>
11
</td>
</tr>
<tr>
<th>
Title
</th>
<td>
role_access
</td>
</tr>
</tbody>
</table>
<a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions/11/edit">
Back to list
</a>
</div>
<nav class="mb-3">
<div class="nav nav-tabs">
</div>
</nav>
<div class="tab-content">
</div>
</div>
</div>
</div>
</main>
<form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
<input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
</form>
</div>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"></script>
<script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"></script>
<script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
<script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
<script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"></script>
<script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"></script>
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"></script>
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"></script>
<script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"></script>
<script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"></script>
<script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"></script>
<script src="http://b3789e93786d.ngrok.io/js/main.js"></script>
<script>
$(function() {
let copyButtonTrans = 'Copy'
let csvButtonTrans = 'CSV'
let excelButtonTrans = 'Excel'
let pdfButtonTrans = 'PDF'
let printButtonTrans = 'Print'
let colvisButtonTrans = 'Column visibility'
let languages = {
'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
};
$.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
$.extend(true, $.fn.dataTable.defaults, {
language: {
url: languages['en']
},
columnDefs: [{
orderable: false,
className: 'select-checkbox',
targets: 0
}, {
orderable: false,
searchable: false,
targets: -1
}],
select: {
style: 'multi+shift',
selector: 'td:first-child'
},
order: [],
scrollX: true,
pageLength: 100,
dom: 'lBfrtip<"actions">',
buttons: [
{
extend: 'copy',
className: 'btn-default',
text: copyButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'csv',
className: 'btn-default',
text: csvButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'excel',
className: 'btn-default',
text: excelButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'pdf',
className: 'btn-default',
text: pdfButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'print',
className: 'btn-default',
text: printButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'colvis',
className: 'btn-default',
text: colvisButtonTrans,
exportOptions: {
columns: ':visible'
}
}
]
});
$.fn.dataTable.ext.classes.sPageButton = '';
});
</script>
</body>
</html>
Transitions describe the steps required to restore the state of the page, to the one it had when it was processed by the scanner, as a series of events. In essence, each transition represents a user interaction.
| # | Time | Event | Element | Options | ||
|---|---|---|---|---|---|---|
| 0 | 1.860287 | load |
page
|
|
||
| 1 | 1.31688 | request |
http://b3789e93786d.ngrok.io/admin/permissions |
|
||
| 2 | 1.77744 | click |
<a class="btn btn-xs btn-primary" href="http://b3789e93786d.ngrok.io/admin/permissions/11">
|
|
||
| 3 | 1.07014 | request |
http://b3789e93786d.ngrok.io/admin/permissions/11 |
|
Raw HTTP request used to retrieve the page.
GET /admin/permissions/11 HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Referer: http://b3789e93786d.ngrok.io/admin/permissions Cookie: XSRF-TOKEN=eyJpdiI6IitiaU03VENMNzRtQzZJTGtZTVBPdWc9PSIsInZhbHVlIjoiZGIzQmxpWXh5emdHbjlXeFo2YUc2bmcrT05lWDkyVTFSNFwvRit0R2tFbHhcL2ZFbFA0TzJ5RnJkelU1cFBJdiszSWJuQms3b1c5VmFNamwwcTZ6cExYUFA0ZW44RlJmMEhUTG1lU2ZcL0wyMzJaUmdqRXAwZllqT0dVQXYzUDFwbVkiLCJtYWMiOiJjMjRmOWY0ZmQ2MDZjYWVjMThhMjkyYTc3ZjA2ZGFjY2JkNzJhYjI1MGMyNWU0Y2RjYTA1NDY3N2YxMzE1OGFlIn0%3D;laravel_session=eyJpdiI6InIzaDVzcGVKSkNzTXVwQmhGWStaMmc9PSIsInZhbHVlIjoibllOV3gydHhvTXRpY3JxYmFCS1R3cVUwXC92ZGpaamVjZTJ6N0xzdXJKclQrY3V5QlJ5RGoySzJJcWtpS21jSHY5cjFVVktzV2YyRW1tVWVMQ2pENWdDQXJ1TVdhM0dCSkgrbFZETEVvYWtHNnA0Y1dNamVObHdLa1B1NXlwbnhRIiwibWFjIjoiZjI4M2U5MGZmNjIzYjAyMzUzY2YxNTI0NTRhY2Y4OGJjOGQwNTBmNDJlYWQxZjhhMWFmZmEwZmRlZWM2ZWY2OCJ9 Accept-Language: en-US,* Host: b3789e93786d.ngrok.io
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 200 OK
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:48:55 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;
/* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
<title>Appointments</title>
<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
<link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
<link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
</head>
<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
<header class="app-header navbar">
<button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
<span class="navbar-toggler-icon"></span>
</button>
<a class="navbar-brand" href="#">
<span class="navbar-brand-full">Appointments</span>
<span class="navbar-brand-minimized">Appointments</span>
</a>
<button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
<span class="navbar-toggler-icon"></span>
</button>
<ul class="nav navbar-nav ml-auto">
</ul>
</header>
<div class="app-body">
<div class="sidebar">
<nav class="sidebar-nav">
<ul class="nav">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
<i class="nav-icon fas fa-fw fa-tachometer-alt">
</i>
Dashboard
</a>
</li>
<li class="nav-item nav-dropdown">
<a class="nav-link nav-dropdown-toggle" href="#">
<i class="fa-fw fas fa-users nav-icon">
</i>
User management
</a>
<ul class="nav-dropdown-items">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
<i class="fa-fw fas fa-unlock-alt nav-icon">
</i>
Permissions
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
<i class="fa-fw fas fa-briefcase nav-icon">
</i>
Roles
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
<i class="fa-fw fas fa-user nav-icon">
</i>
Users
</a>
</li>
</ul>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Services
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Employees
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Clients
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Appointments
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
<i class="nav-icon fa-fw fas fa-calendar">
</i>
Calendar
</a>
</li>
<li class="nav-item">
<a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
<i class="nav-icon fas fa-fw fa-sign-out-alt">
</i>
Logout
</a>
</li>
</ul>
</nav>
<button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div> <main class="main">
<div style="padding-top: 20px" class="container-fluid">
<div class="card">
<div class="card-header">
Show Permissions
</div>
<div class="card-body">
<div class="mb-2">
<table class="table table-bordered table-striped">
<tbody>
<tr>
<th>
ID
</th>
<td>
11
</td>
</tr>
<tr>
<th>
Title
</th>
<td>
role_access
</td>
</tr>
</tbody>
</table>
<a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
Back to list
</a>
</div>
<nav class="mb-3">
<div class="nav nav-tabs">
</div>
</nav>
<div class="tab-content">
</div>
</div>
</div>
</div>
</main>
<form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
<input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
</form>
</div>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://b3789e93786d.ngrok.io/js/main.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
$(function() {
let copyButtonTrans = 'Copy'
let csvButtonTrans = 'CSV'
let excelButtonTrans = 'Excel'
let pdfButtonTrans = 'PDF'
let printButtonTrans = 'Print'
let colvisButtonTrans = 'Column visibility'
let languages = {
'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
};
$.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
$.extend(true, $.fn.dataTable.defaults, {
language: {
url: languages['en']
},
columnDefs: [{
orderable: false,
className: 'select-checkbox',
targets: 0
}, {
orderable: false,
searchable: false,
targets: -1
}],
select: {
style: 'multi+shift',
selector: 'td:first-child'
},
order: [],
scrollX: true,
pageLength: 100,
dom: 'lBfrtip<"actions">',
buttons: [
{
extend: 'copy',
className: 'btn-default',
text: copyButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'csv',
className: 'btn-default',
text: csvButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'excel',
className: 'btn-default',
text: excelButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'pdf',
className: 'btn-default',
text: pdfButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'print',
className: 'btn-default',
text: printButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'colvis',
className: 'btn-default',
text: colvisButtonTrans,
exportOptions: {
columns: ':visible'
}
}
]
});
$.fn.dataTable.ext.classes.sPageButton = '';
});
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
</body>
</html>
This is the browser-evaluated body, as a result of the listed transitions.
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 | <html><head><script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script> /* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */ window._arachni_js_namespace = true; /* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */ </script> <!-- Injected by Arachni::Browser::Javascript --> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> <title>Appointments</title> <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet"> <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet"> <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet"> <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet"> <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet"> </head> <body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show"> <header class="app-header navbar"> <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show"> <span class="navbar-toggler-icon"></span> </button> <a class="navbar-brand" href="#"> <span class="navbar-brand-full">Appointments</span> <span class="navbar-brand-minimized">Appointments</span> </a> <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show"> <span class="navbar-toggler-icon"></span> </button> <ul class="nav navbar-nav ml-auto"> </ul> </header> <div class="app-body"> <div class="sidebar"> <nav class="sidebar-nav"> <ul class="nav"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link" data-arachni-id="209607824"> <i class="nav-icon fas fa-fw fa-tachometer-alt"> </i> Dashboard </a> </li> <li class="nav-item nav-dropdown"> <a class="nav-link nav-dropdown-toggle" href="#"> <i class="fa-fw fas fa-users nav-icon"> </i> User management </a> <ul class="nav-dropdown-items"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active" data-arachni-id="1555521058"> <i class="fa-fw fas fa-unlock-alt nav-icon"> </i> Permissions </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link " data-arachni-id="-1170485759"> <i class="fa-fw fas fa-briefcase nav-icon"> </i> Roles </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link " data-arachni-id="-832018167"> <i class="fa-fw fas fa-user nav-icon"> </i> Users </a> </li> </ul> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link " data-arachni-id="-932905896"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Services </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link " data-arachni-id="-692569287"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Employees </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link " data-arachni-id="-2088011370"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Clients </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link " data-arachni-id="-57651262"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Appointments </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link " data-arachni-id="-2134217464"> <i class="nav-icon fa-fw fas fa-calendar"> </i> Calendar </a> </li> <li class="nav-item"> <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();" data-arachni-id="273839128"> <i class="nav-icon fas fa-fw fa-sign-out-alt"> </i> Logout </a> </li> </ul> </nav> <button class="sidebar-minimizer brand-minimizer" type="button"></button> </div> <main class="main"> <div style="padding-top: 20px" class="container-fluid"> <div class="card"> <div class="card-header"> Show Permissions </div> <div class="card-body"> <div class="mb-2"> <table class="table table-bordered table-striped"> <tbody> <tr> <th> ID </th> <td> 11 </td> </tr> <tr> <th> Title </th> <td> role_access </td> </tr> </tbody> </table> <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions"> Back to list </a> </div> <nav class="mb-3"> <div class="nav nav-tabs"> </div> </nav> <div class="tab-content"> </div> </div> </div> </div> </main> <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;"> <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> </form> </div> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://b3789e93786d.ngrok.io/js/main.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); $(function() { let copyButtonTrans = 'Copy' let csvButtonTrans = 'CSV' let excelButtonTrans = 'Excel' let pdfButtonTrans = 'PDF' let printButtonTrans = 'Print' let colvisButtonTrans = 'Column visibility' let languages = { 'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json' }; $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' }) $.extend(true, $.fn.dataTable.defaults, { language: { url: languages['en'] }, columnDefs: [{ orderable: false, className: 'select-checkbox', targets: 0 }, { orderable: false, searchable: false, targets: -1 }], select: { style: 'multi+shift', selector: 'td:first-child' }, order: [], scrollX: true, pageLength: 100, dom: 'lBfrtip<"actions">', buttons: [ { extend: 'copy', className: 'btn-default', text: copyButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'csv', className: 'btn-default', text: csvButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'excel', className: 'btn-default', text: excelButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'pdf', className: 'btn-default', text: pdfButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'print', className: 'btn-default', text: printButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'colvis', className: 'btn-default', text: colvisButtonTrans, exportOptions: { columns: ':visible' } } ] }); $.fn.dataTable.ext.classes.sPageButton = ''; }); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> </body></html> |
This is the original HTTP response body.
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 | <script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script> /* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */ window._arachni_js_namespace = true; /* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */ </script> <!-- Injected by Arachni::Browser::Javascript --> <!DOCTYPE html> <html> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> <title>Appointments</title> <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" /> <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" /> <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" /> <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" /> </head> <body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show"> <header class="app-header navbar"> <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show"> <span class="navbar-toggler-icon"></span> </button> <a class="navbar-brand" href="#"> <span class="navbar-brand-full">Appointments</span> <span class="navbar-brand-minimized">Appointments</span> </a> <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show"> <span class="navbar-toggler-icon"></span> </button> <ul class="nav navbar-nav ml-auto"> </ul> </header> <div class="app-body"> <div class="sidebar"> <nav class="sidebar-nav"> <ul class="nav"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link"> <i class="nav-icon fas fa-fw fa-tachometer-alt"> </i> Dashboard </a> </li> <li class="nav-item nav-dropdown"> <a class="nav-link nav-dropdown-toggle" href="#"> <i class="fa-fw fas fa-users nav-icon"> </i> User management </a> <ul class="nav-dropdown-items"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active"> <i class="fa-fw fas fa-unlock-alt nav-icon"> </i> Permissions </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link "> <i class="fa-fw fas fa-briefcase nav-icon"> </i> Roles </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link "> <i class="fa-fw fas fa-user nav-icon"> </i> Users </a> </li> </ul> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Services </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Employees </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Clients </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Appointments </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link "> <i class="nav-icon fa-fw fas fa-calendar"> </i> Calendar </a> </li> <li class="nav-item"> <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();"> <i class="nav-icon fas fa-fw fa-sign-out-alt"> </i> Logout </a> </li> </ul> </nav> <button class="sidebar-minimizer brand-minimizer" type="button"></button> </div> <main class="main"> <div style="padding-top: 20px" class="container-fluid"> <div class="card"> <div class="card-header"> Show Permissions </div> <div class="card-body"> <div class="mb-2"> <table class="table table-bordered table-striped"> <tbody> <tr> <th> ID </th> <td> 11 </td> </tr> <tr> <th> Title </th> <td> role_access </td> </tr> </tbody> </table> <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions"> Back to list </a> </div> <nav class="mb-3"> <div class="nav nav-tabs"> </div> </nav> <div class="tab-content"> </div> </div> </div> </div> </main> <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;"> <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> </form> </div> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://b3789e93786d.ngrok.io/js/main.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); $(function() { let copyButtonTrans = 'Copy' let csvButtonTrans = 'CSV' let excelButtonTrans = 'Excel' let pdfButtonTrans = 'PDF' let printButtonTrans = 'Print' let colvisButtonTrans = 'Column visibility' let languages = { 'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json' }; $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' }) $.extend(true, $.fn.dataTable.defaults, { language: { url: languages['en'] }, columnDefs: [{ orderable: false, className: 'select-checkbox', targets: 0 }, { orderable: false, searchable: false, targets: -1 }], select: { style: 'multi+shift', selector: 'td:first-child' }, order: [], scrollX: true, pageLength: 100, dom: 'lBfrtip<"actions">', buttons: [ { extend: 'copy', className: 'btn-default', text: copyButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'csv', className: 'btn-default', text: csvButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'excel', className: 'btn-default', text: excelButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'pdf', className: 'btn-default', text: pdfButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'print', className: 'btn-default', text: printButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'colvis', className: 'btn-default', text: colvisButtonTrans, exportOptions: { columns: ':visible' } } ] }); $.fn.dataTable.ext.classes.sPageButton = ''; }); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> </body> </html> |
server
using
GET
at
http://b3789e93786d.ngrok.io/login
pointing to
http://b3789e93786d.ngrok.io/login
.
System components have attached some insights to this issue.
| Proof |
|---|
HTTP/1.1 302 Found |
| Type | In | Action |
|---|---|---|
server |
http://b3789e93786d.ngrok.io/login | http://b3789e93786d.ngrok.io/login |
Raw HTTP request used to retrieve the page.
GET /login HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6IkFUc3RCTVB0NkRNaGlQaDh4YUZybmc9PSIsInZhbHVlIjoiMjdleEMxaUNEcVwvRElUenlVMUhhdGUwaGt0YnNGYjZNbFwvUTFaenNITHJRZ2lkMzJyZWJJV0NTaHV2NFhldHFlbjB0N01Pd1ZwaWJMaU5FQkRpZ091dHlCMmszZnZnSFRRNWp3WkdxNks0eDJFY0JiWWFSekZMRmRNZ0R6UDBKcSIsIm1hYyI6Ijg4ZmZmMjY3ZDdlNjU0NjFjNGI1OGU2MmUxNTc1OGFjZTk5NTcyZGY5YzFlMTkxZTBkMTNlZGFlMzZlYjk2ZTAifQ%3D%3D;laravel_session=eyJpdiI6Ijlpd3FOYVY3cjMwV1wvUkZmZVI5VmlBPT0iLCJ2YWx1ZSI6Im11c1BLbEtnVWttSHZ5NWdvTWl3cXpvVlpRajh1Qm9aVG5KUVwvVlhIaXAyQitvTjNoQnhaYWo2aTNQQVhneVwvdWlubm5PcTBtamNIYjYwdFZzUityS1U3VFwvQnNjM3JEaXNldGR6M2JyeG42MzErQStVZWpZTlJFY21Uc0FsM1lQIiwibWFjIjoiMGUzNmE5ZmVhMGNjZmEzMmU0N2YyYzgwOWFkNjU5OWNlZTBkMTAzNWFhMDFjZTg5ZDE4MDkyODc5ZDY4NDE0OCJ9
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 302 Found
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:51:00 GMT
Location: http://b3789e93786d.ngrok.io/login
Set-Cookie: XSRF-TOKEN=eyJpdiI6ImxRazRsWnBENmpmSDc5VnFRb2FWSFE9PSIsInZhbHVlIjoialdnbmdjME5UVGhqRXRUaHY3TjVlYTZ2ZXBDOHQyTnZmenlOaCszQ1RzOHRCZGxidjVnVURBdlZXS1VZMWFnZ0NGXC8yd2NZRWl2K2J0Wjl5S2FHalc4NzUzRkl2ZEJuQXNNRlRXZTZSdHdTN1JaSFlWXC8wbTlHanVqdEF2enRoSSIsIm1hYyI6ImVjNzZiYmM1YTczMzQ0MGU4YjVjZDY5Y2I0NzNkOWNlNzIzNDAyZGQzZWQ0Njg0MWZkZGFkYmM3ZmJkNWE1N2QifQ%3D%3D; expires=Mon, 02-Nov-2020 14:51:00 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6ImRjU1VidVwvTGc1U2JVZXEwbm9wanV3PT0iLCJ2YWx1ZSI6IktDcis2WlZ4dmVjVkg5aDM1Y3lKanQwVytJY21ESDcxVTdKUFwvc0JRaTE2RGVFQlBzWVBUcVwvdXNET2t5QUZQclBSaERsUEFYRFVTdTRLMTdXVUpSalwvT1l6N2Y3czFsYmViMUVwTE5vcmYya3FlYXNTXC8zZkJvbm1BMVNvemE3MiIsIm1hYyI6IjNiNWNmNTJiY2VmNmM2NTI3NGMxMjlmNTAxZGVjMjhjZDlhMGJkM2QxYjBmMmUwMmU1OGRlMGM5ZDk2OGViODgifQ%3D%3D; expires=Mon, 02-Nov-2020 14:51:00 GMT; Max-Age=7200; path=/; httponly
HTTP/1.1 200 OK
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:51:00 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6IlplclI3TXpTYVFXaHlONGlsbmt0OEE9PSIsInZhbHVlIjoiUFZ0TmZNbDVQY0NpNkxPZUpXWnlYSE1QSVh3S29XamdJOERSdkZIMlVvVWlDWU9iWWpWTDMwd3N0Y3V0TTEyR0FXZGZJdVdoNTdnQTF0cEs4WGtJK3poa0puQXF2eDEyODhUT0FDNVFKckdVT1h0Z3dPU3NDZml3ZmhZdDU2THgiLCJtYWMiOiI3MmFlN2NjZDRkODdiMzQ2ZjliYWU5ZGUzMDYzOGExN2UyMzg2ZTYxNmQ0ZTljNjdkY2JhYmVjODM1ZmFmZDkxIn0%3D; expires=Mon, 02-Nov-2020 14:51:00 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6ImxzZ3FSMVhCQzZBRXJMZkVUMUZVR3c9PSIsInZhbHVlIjoiQjFDR1FNV1RxQ01kS0tOdHh4YkdYXC9LSWViR2s4b0RlRHJyczNncUMzM0ExVzFLM2JYUjkxWG1LNlhUV29FU2MwcSsyODdLVm5CeHc4ZlNkcWRVQmlNb1wvTzlQVkRCalRjNlZGYTZtWHdHNTl2amJicVpUZmk5WjNcL1pwTTV1UHMiLCJtYWMiOiJmY2VhN2I4YmEzMWM1MWJjN2I4Yjg4ODQ3NjY3ZDM0Nzk5NTQ3YzhjMzFkZmIyNTQyNzg5NDUxYjZkYTliZWM2In0%3D; expires=Mon, 02-Nov-2020 14:51:00 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="csrf-token" content="K4OVTMgVoSfY7hJ7ot9bpskSkJD7l8VbzookoAlh">
<title>Appointments</title>
<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
<link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
<link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
</head>
<body class="header-fixed sidebar-fixed aside-menu-fixed aside-menu-hidden login-page">
<div class="app flex-row align-items-center">
<div class="container">
<div class="row justify-content-center">
<div class="col-md-8">
<div class="card-group">
<div class="card p-4">
<div class="card-body">
<form method="POST" action="http://b3789e93786d.ngrok.io/login">
<input type="hidden" name="_token" value="K4OVTMgVoSfY7hJ7ot9bpskSkJD7l8VbzookoAlh">
<h1>Appointments</h1>
<p class="text-muted">Login</p>
<div class="input-group mb-3">
<div class="input-group-prepend">
<span class="input-group-text">
<i class="fa fa-user"></i>
</span>
</div>
<input name="email" type="text" class="form-control" required autofocus placeholder="Email" value="">
</div>
<div class="input-group mb-3">
<div class="input-group-prepend">
<span class="input-group-text"><i class="fa fa-lock"></i></span>
</div>
<input name="password" type="password" class="form-control" required placeholder="Password">
</div>
<div class="input-group mb-4">
<div class="form-check checkbox">
<input class="form-check-input" name="remember" type="checkbox" id="remember" style="vertical-align: middle;" />
<label class="form-check-label" for="remember" style="vertical-align: middle;">
Remember me
</label>
</div>
</div>
<div class="row">
<div class="col-6">
<button type="submit" class="btn btn-primary px-4">
Login
</button>
</div>
<div class="col-6 text-right">
<a class="btn btn-link px-0" href="http://b3789e93786d.ngrok.io/password/reset">
Forgot your password?
</a>
</div>
</div>
</form>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>
Transitions describe the steps required to restore the state of the page, to the one it had when it was processed by the scanner, as a series of events. In essence, each transition represents a user interaction.
| # | Time | Event | Element | Options | ||
|---|---|---|---|---|---|---|
| 0 | 1.860287 | load |
page
|
|
||
| 1 | 1.31688 | request |
http://b3789e93786d.ngrok.io/admin/permissions |
|
||
| 2 | 1.984026 | click |
<a class="btn btn-xs btn-primary" href="http://b3789e93786d.ngrok.io/admin/permissions/6">
|
|
||
| 3 | 1.287882 | request |
http://b3789e93786d.ngrok.io/admin/permissions/6 |
|
Raw HTTP request used to retrieve the page.
GET /admin/permissions/6 HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Referer: http://b3789e93786d.ngrok.io/admin/permissions Cookie: XSRF-TOKEN=eyJpdiI6IjN1VTdiUDNxeHhMcWtSQjZKWGo5d0E9PSIsInZhbHVlIjoieG5kZmZoVmFMZEVnZWhHXC9paENnRWRrUXpCb1ZyNUVVeUo4d1M4RTRLYjBJbkoxdWNYYXI2aFhubmhvTFRyUEZWMjQ4a0dBczNDREhISVROT3Q2OVd1Y0ZuOGVzazZmaGlVck52VGs5WjlQRytBblVPWFppXC8rK01QUStHNU5QWiIsIm1hYyI6ImJkY2RkNGE3NzBmNTRmOTY5NTZlMzYxMDhlZmI1ZjY3M2RmMTg5ZjgxOWUzNjE1M2U0OWQ1MWZiOGUzMDMwMmEifQ%3D%3D;laravel_session=eyJpdiI6ImhxdXNVN1VcLytGdW5WdFFid09ZOTBBPT0iLCJ2YWx1ZSI6IlhBZGlEVm1GODJTcXd5ZVwvYVF2M0tSd1JWWkUzUWZXU0MwSThBRzJhQjl1b1dIRERlbGdWYkxNXC9CRFwvOUhkeHVxTkJZTWJqeTdyRE5lXC92cGRNa0NyVG5DWFJJQXdpbm9VdVVpVGE5RDhtR1E1cERSOEJkbEdJWnN4WnFSMEJjUCIsIm1hYyI6IjUyMjJiNDUyMGI0NTdiZjFkNmYyZDNhYzA0NzFiZTg1YmYyMjJhZjk5MWZkOWUxZWRhNDhhOGU2ZmExNDgyOTQifQ%3D%3D Accept-Language: en-US,* Host: b3789e93786d.ngrok.io
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 200 OK
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:48:12 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6IkFUc3RCTVB0NkRNaGlQaDh4YUZybmc9PSIsInZhbHVlIjoiMjdleEMxaUNEcVwvRElUenlVMUhhdGUwaGt0YnNGYjZNbFwvUTFaenNITHJRZ2lkMzJyZWJJV0NTaHV2NFhldHFlbjB0N01Pd1ZwaWJMaU5FQkRpZ091dHlCMmszZnZnSFRRNWp3WkdxNks0eDJFY0JiWWFSekZMRmRNZ0R6UDBKcSIsIm1hYyI6Ijg4ZmZmMjY3ZDdlNjU0NjFjNGI1OGU2MmUxNTc1OGFjZTk5NTcyZGY5YzFlMTkxZTBkMTNlZGFlMzZlYjk2ZTAifQ%3D%3D; expires=Mon, 02-Nov-2020 14:48:12 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6Ijlpd3FOYVY3cjMwV1wvUkZmZVI5VmlBPT0iLCJ2YWx1ZSI6Im11c1BLbEtnVWttSHZ5NWdvTWl3cXpvVlpRajh1Qm9aVG5KUVwvVlhIaXAyQitvTjNoQnhaYWo2aTNQQVhneVwvdWlubm5PcTBtamNIYjYwdFZzUityS1U3VFwvQnNjM3JEaXNldGR6M2JyeG42MzErQStVZWpZTlJFY21Uc0FsM1lQIiwibWFjIjoiMGUzNmE5ZmVhMGNjZmEzMmU0N2YyYzgwOWFkNjU5OWNlZTBkMTAzNWFhMDFjZTg5ZDE4MDkyODc5ZDY4NDE0OCJ9; expires=Mon, 02-Nov-2020 14:48:12 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;
/* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="csrf-token" content="jRf7G3247SuKL6ovUuJaNENQ2el0SeMV4RjNK8c5">
<title>Appointments</title>
<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
<link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
<link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
</head>
<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
<header class="app-header navbar">
<button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
<span class="navbar-toggler-icon"></span>
</button>
<a class="navbar-brand" href="#">
<span class="navbar-brand-full">Appointments</span>
<span class="navbar-brand-minimized">Appointments</span>
</a>
<button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
<span class="navbar-toggler-icon"></span>
</button>
<ul class="nav navbar-nav ml-auto">
</ul>
</header>
<div class="app-body">
<div class="sidebar">
<nav class="sidebar-nav">
<ul class="nav">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
<i class="nav-icon fas fa-fw fa-tachometer-alt">
</i>
Dashboard
</a>
</li>
<li class="nav-item nav-dropdown">
<a class="nav-link nav-dropdown-toggle" href="#">
<i class="fa-fw fas fa-users nav-icon">
</i>
User management
</a>
<ul class="nav-dropdown-items">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
<i class="fa-fw fas fa-unlock-alt nav-icon">
</i>
Permissions
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
<i class="fa-fw fas fa-briefcase nav-icon">
</i>
Roles
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
<i class="fa-fw fas fa-user nav-icon">
</i>
Users
</a>
</li>
</ul>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Services
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Employees
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Clients
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Appointments
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
<i class="nav-icon fa-fw fas fa-calendar">
</i>
Calendar
</a>
</li>
<li class="nav-item">
<a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
<i class="nav-icon fas fa-fw fa-sign-out-alt">
</i>
Logout
</a>
</li>
</ul>
</nav>
<button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div> <main class="main">
<div style="padding-top: 20px" class="container-fluid">
<div class="card">
<div class="card-header">
Show Permissions
</div>
<div class="card-body">
<div class="mb-2">
<table class="table table-bordered table-striped">
<tbody>
<tr>
<th>
ID
</th>
<td>
6
</td>
</tr>
<tr>
<th>
Title
</th>
<td>
permission_access
</td>
</tr>
</tbody>
</table>
<a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
Back to list
</a>
</div>
<nav class="mb-3">
<div class="nav nav-tabs">
</div>
</nav>
<div class="tab-content">
</div>
</div>
</div>
</div>
</main>
<form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
<input type="hidden" name="_token" value="jRf7G3247SuKL6ovUuJaNENQ2el0SeMV4RjNK8c5">
</form>
</div>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://b3789e93786d.ngrok.io/js/main.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
$(function() {
let copyButtonTrans = 'Copy'
let csvButtonTrans = 'CSV'
let excelButtonTrans = 'Excel'
let pdfButtonTrans = 'PDF'
let printButtonTrans = 'Print'
let colvisButtonTrans = 'Column visibility'
let languages = {
'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
};
$.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
$.extend(true, $.fn.dataTable.defaults, {
language: {
url: languages['en']
},
columnDefs: [{
orderable: false,
className: 'select-checkbox',
targets: 0
}, {
orderable: false,
searchable: false,
targets: -1
}],
select: {
style: 'multi+shift',
selector: 'td:first-child'
},
order: [],
scrollX: true,
pageLength: 100,
dom: 'lBfrtip<"actions">',
buttons: [
{
extend: 'copy',
className: 'btn-default',
text: copyButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'csv',
className: 'btn-default',
text: csvButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'excel',
className: 'btn-default',
text: excelButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'pdf',
className: 'btn-default',
text: pdfButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'print',
className: 'btn-default',
text: printButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'colvis',
className: 'btn-default',
text: colvisButtonTrans,
exportOptions: {
columns: ':visible'
}
}
]
});
$.fn.dataTable.ext.classes.sPageButton = '';
});
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
</body>
</html>
This is the browser-evaluated body, as a result of the listed transitions.
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 | <html><head><script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script> /* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */ window._arachni_js_namespace = true; /* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */ </script> <!-- Injected by Arachni::Browser::Javascript --> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="csrf-token" content="jRf7G3247SuKL6ovUuJaNENQ2el0SeMV4RjNK8c5"> <title>Appointments</title> <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet"> <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet"> <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet"> <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet"> <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet"> </head> <body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show"> <header class="app-header navbar"> <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show"> <span class="navbar-toggler-icon"></span> </button> <a class="navbar-brand" href="#"> <span class="navbar-brand-full">Appointments</span> <span class="navbar-brand-minimized">Appointments</span> </a> <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show"> <span class="navbar-toggler-icon"></span> </button> <ul class="nav navbar-nav ml-auto"> </ul> </header> <div class="app-body"> <div class="sidebar"> <nav class="sidebar-nav"> <ul class="nav"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link" data-arachni-id="209607824"> <i class="nav-icon fas fa-fw fa-tachometer-alt"> </i> Dashboard </a> </li> <li class="nav-item nav-dropdown"> <a class="nav-link nav-dropdown-toggle" href="#"> <i class="fa-fw fas fa-users nav-icon"> </i> User management </a> <ul class="nav-dropdown-items"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active" data-arachni-id="1555521058"> <i class="fa-fw fas fa-unlock-alt nav-icon"> </i> Permissions </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link " data-arachni-id="-1170485759"> <i class="fa-fw fas fa-briefcase nav-icon"> </i> Roles </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link " data-arachni-id="-832018167"> <i class="fa-fw fas fa-user nav-icon"> </i> Users </a> </li> </ul> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link " data-arachni-id="-932905896"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Services </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link " data-arachni-id="-692569287"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Employees </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link " data-arachni-id="-2088011370"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Clients </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link " data-arachni-id="-57651262"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Appointments </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link " data-arachni-id="-2134217464"> <i class="nav-icon fa-fw fas fa-calendar"> </i> Calendar </a> </li> <li class="nav-item"> <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();" data-arachni-id="273839128"> <i class="nav-icon fas fa-fw fa-sign-out-alt"> </i> Logout </a> </li> </ul> </nav> <button class="sidebar-minimizer brand-minimizer" type="button"></button> </div> <main class="main"> <div style="padding-top: 20px" class="container-fluid"> <div class="card"> <div class="card-header"> Show Permissions </div> <div class="card-body"> <div class="mb-2"> <table class="table table-bordered table-striped"> <tbody> <tr> <th> ID </th> <td> 6 </td> </tr> <tr> <th> Title </th> <td> permission_access </td> </tr> </tbody> </table> <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions"> Back to list </a> </div> <nav class="mb-3"> <div class="nav nav-tabs"> </div> </nav> <div class="tab-content"> </div> </div> </div> </div> </main> <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;"> <input type="hidden" name="_token" value="jRf7G3247SuKL6ovUuJaNENQ2el0SeMV4RjNK8c5"> </form> </div> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://b3789e93786d.ngrok.io/js/main.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); $(function() { let copyButtonTrans = 'Copy' let csvButtonTrans = 'CSV' let excelButtonTrans = 'Excel' let pdfButtonTrans = 'PDF' let printButtonTrans = 'Print' let colvisButtonTrans = 'Column visibility' let languages = { 'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json' }; $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' }) $.extend(true, $.fn.dataTable.defaults, { language: { url: languages['en'] }, columnDefs: [{ orderable: false, className: 'select-checkbox', targets: 0 }, { orderable: false, searchable: false, targets: -1 }], select: { style: 'multi+shift', selector: 'td:first-child' }, order: [], scrollX: true, pageLength: 100, dom: 'lBfrtip<"actions">', buttons: [ { extend: 'copy', className: 'btn-default', text: copyButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'csv', className: 'btn-default', text: csvButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'excel', className: 'btn-default', text: excelButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'pdf', className: 'btn-default', text: pdfButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'print', className: 'btn-default', text: printButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'colvis', className: 'btn-default', text: colvisButtonTrans, exportOptions: { columns: ':visible' } } ] }); $.fn.dataTable.ext.classes.sPageButton = ''; }); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> </body></html> |
This is the original HTTP response body.
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 | <script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script> /* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */ window._arachni_js_namespace = true; /* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */ </script> <!-- Injected by Arachni::Browser::Javascript --> <!DOCTYPE html> <html> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="csrf-token" content="jRf7G3247SuKL6ovUuJaNENQ2el0SeMV4RjNK8c5"> <title>Appointments</title> <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" /> <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" /> <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" /> <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" /> </head> <body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show"> <header class="app-header navbar"> <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show"> <span class="navbar-toggler-icon"></span> </button> <a class="navbar-brand" href="#"> <span class="navbar-brand-full">Appointments</span> <span class="navbar-brand-minimized">Appointments</span> </a> <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show"> <span class="navbar-toggler-icon"></span> </button> <ul class="nav navbar-nav ml-auto"> </ul> </header> <div class="app-body"> <div class="sidebar"> <nav class="sidebar-nav"> <ul class="nav"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link"> <i class="nav-icon fas fa-fw fa-tachometer-alt"> </i> Dashboard </a> </li> <li class="nav-item nav-dropdown"> <a class="nav-link nav-dropdown-toggle" href="#"> <i class="fa-fw fas fa-users nav-icon"> </i> User management </a> <ul class="nav-dropdown-items"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active"> <i class="fa-fw fas fa-unlock-alt nav-icon"> </i> Permissions </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link "> <i class="fa-fw fas fa-briefcase nav-icon"> </i> Roles </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link "> <i class="fa-fw fas fa-user nav-icon"> </i> Users </a> </li> </ul> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Services </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Employees </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Clients </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Appointments </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link "> <i class="nav-icon fa-fw fas fa-calendar"> </i> Calendar </a> </li> <li class="nav-item"> <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();"> <i class="nav-icon fas fa-fw fa-sign-out-alt"> </i> Logout </a> </li> </ul> </nav> <button class="sidebar-minimizer brand-minimizer" type="button"></button> </div> <main class="main"> <div style="padding-top: 20px" class="container-fluid"> <div class="card"> <div class="card-header"> Show Permissions </div> <div class="card-body"> <div class="mb-2"> <table class="table table-bordered table-striped"> <tbody> <tr> <th> ID </th> <td> 6 </td> </tr> <tr> <th> Title </th> <td> permission_access </td> </tr> </tbody> </table> <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions"> Back to list </a> </div> <nav class="mb-3"> <div class="nav nav-tabs"> </div> </nav> <div class="tab-content"> </div> </div> </div> </div> </main> <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;"> <input type="hidden" name="_token" value="jRf7G3247SuKL6ovUuJaNENQ2el0SeMV4RjNK8c5"> </form> </div> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://b3789e93786d.ngrok.io/js/main.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); $(function() { let copyButtonTrans = 'Copy' let csvButtonTrans = 'CSV' let excelButtonTrans = 'Excel' let pdfButtonTrans = 'PDF' let printButtonTrans = 'Print' let colvisButtonTrans = 'Column visibility' let languages = { 'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json' }; $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' }) $.extend(true, $.fn.dataTable.defaults, { language: { url: languages['en'] }, columnDefs: [{ orderable: false, className: 'select-checkbox', targets: 0 }, { orderable: false, searchable: false, targets: -1 }], select: { style: 'multi+shift', selector: 'td:first-child' }, order: [], scrollX: true, pageLength: 100, dom: 'lBfrtip<"actions">', buttons: [ { extend: 'copy', className: 'btn-default', text: copyButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'csv', className: 'btn-default', text: csvButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'excel', className: 'btn-default', text: excelButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'pdf', className: 'btn-default', text: pdfButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'print', className: 'btn-default', text: printButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'colvis', className: 'btn-default', text: colvisButtonTrans, exportOptions: { columns: ':visible' } } ] }); $.fn.dataTable.ext.classes.sPageButton = ''; }); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> </body> </html> |
server
using
GET
at
http://b3789e93786d.ngrok.io/admin/permissions/11%20(third%20copy)/
pointing to
http://b3789e93786d.ngrok.io/admin/permissions/11%20(third%20copy)/
.
System components have attached some insights to this issue.
| Proof |
|---|
HTTP/1.1 200 OK |
Raw HTTP request used to retrieve the page.
GET /admin/permissions/11%20(third%20copy)/ HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D;laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 200 OK
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:56:31 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6IlAzY0dPN1F1OThjSDNITW95QkhieEE9PSIsInZhbHVlIjoibnBYTFo0YzZLK1pBblM0ZUtuN2JPVDVZNFJhdDlNTkZmcTZ3VXBYZXE1anlqUW9ja3VzK3RuWU1PcDIrVnFTMG9ZVWVxRTQrZnpkaUt2bEZvT2ZuV0cwdk9NU01ma1ROZ0RNZXRTRXRNS3hoU05mdURIekQ5c2VOTm8reGd3bnYiLCJtYWMiOiIyMWExYzQ0ZGNmMjI5ZGE1MTcyZTc1ZDY0Mzc1M2Y4ODQ2NzIyZTE5OGRkNmY2N2EyZWZkNjE5Yzg5OWYxOWI1In0%3D; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6IlNhTWwxMmd1a29zMWVcLzRCa0JYT2lBPT0iLCJ2YWx1ZSI6Ilh2WUJoeW9YSHZCWjE3QmcwSmlaWCtqVFRXekkyemdRTGQ4d3dZakZFRmN3R0lvS1gwK3AxcnNSNEU3Q3c0blQ1TWJkQjFtc2lKS3lQcFdIUHpiTnpPMkpweW53U3dZSHVBT1g2b1wvNmZUcWpremo1a0tyUWpQQllzaTFQdXp3diIsIm1hYyI6IjBlODVmYmE5MTQ3MTE5NzVmNDM4NTNkMzQ4YzY1MWE1NzE4MWNmMzY4ZmU3ODUxMWVmNTk4ZTlmNDQ5N2M2NWIifQ%3D%3D; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
<title>Appointments</title>
<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
<link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
<link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
</head>
<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
<header class="app-header navbar">
<button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
<span class="navbar-toggler-icon"></span>
</button>
<a class="navbar-brand" href="#">
<span class="navbar-brand-full">Appointments</span>
<span class="navbar-brand-minimized">Appointments</span>
</a>
<button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
<span class="navbar-toggler-icon"></span>
</button>
<ul class="nav navbar-nav ml-auto">
</ul>
</header>
<div class="app-body">
<div class="sidebar">
<nav class="sidebar-nav">
<ul class="nav">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
<i class="nav-icon fas fa-fw fa-tachometer-alt">
</i>
Dashboard
</a>
</li>
<li class="nav-item nav-dropdown">
<a class="nav-link nav-dropdown-toggle" href="#">
<i class="fa-fw fas fa-users nav-icon">
</i>
User management
</a>
<ul class="nav-dropdown-items">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
<i class="fa-fw fas fa-unlock-alt nav-icon">
</i>
Permissions
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
<i class="fa-fw fas fa-briefcase nav-icon">
</i>
Roles
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
<i class="fa-fw fas fa-user nav-icon">
</i>
Users
</a>
</li>
</ul>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Services
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Employees
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Clients
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Appointments
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
<i class="nav-icon fa-fw fas fa-calendar">
</i>
Calendar
</a>
</li>
<li class="nav-item">
<a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
<i class="nav-icon fas fa-fw fa-sign-out-alt">
</i>
Logout
</a>
</li>
</ul>
</nav>
<button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div> <main class="main">
<div style="padding-top: 20px" class="container-fluid">
<div class="card">
<div class="card-header">
Show Permissions
</div>
<div class="card-body">
<div class="mb-2">
<table class="table table-bordered table-striped">
<tbody>
<tr>
<th>
ID
</th>
<td>
11
</td>
</tr>
<tr>
<th>
Title
</th>
<td>
role_access
</td>
</tr>
</tbody>
</table>
<a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions/11%20(copy)">
Back to list
</a>
</div>
<nav class="mb-3">
<div class="nav nav-tabs">
</div>
</nav>
<div class="tab-content">
</div>
</div>
</div>
</div>
</main>
<form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
<input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
</form>
</div>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"></script>
<script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"></script>
<script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
<script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
<script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"></script>
<script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"></script>
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"></script>
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"></script>
<script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"></script>
<script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"></script>
<script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"></script>
<script src="http://b3789e93786d.ngrok.io/js/main.js"></script>
<script>
$(function() {
let copyButtonTrans = 'Copy'
let csvButtonTrans = 'CSV'
let excelButtonTrans = 'Excel'
let pdfButtonTrans = 'PDF'
let printButtonTrans = 'Print'
let colvisButtonTrans = 'Column visibility'
let languages = {
'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
};
$.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
$.extend(true, $.fn.dataTable.defaults, {
language: {
url: languages['en']
},
columnDefs: [{
orderable: false,
className: 'select-checkbox',
targets: 0
}, {
orderable: false,
searchable: false,
targets: -1
}],
select: {
style: 'multi+shift',
selector: 'td:first-child'
},
order: [],
scrollX: true,
pageLength: 100,
dom: 'lBfrtip<"actions">',
buttons: [
{
extend: 'copy',
className: 'btn-default',
text: copyButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'csv',
className: 'btn-default',
text: csvButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'excel',
className: 'btn-default',
text: excelButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'pdf',
className: 'btn-default',
text: pdfButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'print',
className: 'btn-default',
text: printButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'colvis',
className: 'btn-default',
text: colvisButtonTrans,
exportOptions: {
columns: ':visible'
}
}
]
});
$.fn.dataTable.ext.classes.sPageButton = '';
});
</script>
</body>
</html>
Transitions describe the steps required to restore the state of the page, to the one it had when it was processed by the scanner, as a series of events. In essence, each transition represents a user interaction.
| # | Time | Event | Element | Options | ||
|---|---|---|---|---|---|---|
| 0 | 1.860287 | load |
page
|
|
||
| 1 | 1.31688 | request |
http://b3789e93786d.ngrok.io/admin/permissions |
|
||
| 2 | 1.77744 | click |
<a class="btn btn-xs btn-primary" href="http://b3789e93786d.ngrok.io/admin/permissions/11">
|
|
||
| 3 | 1.07014 | request |
http://b3789e93786d.ngrok.io/admin/permissions/11 |
|
Raw HTTP request used to retrieve the page.
GET /admin/permissions/11 HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Referer: http://b3789e93786d.ngrok.io/admin/permissions Cookie: XSRF-TOKEN=eyJpdiI6IitiaU03VENMNzRtQzZJTGtZTVBPdWc9PSIsInZhbHVlIjoiZGIzQmxpWXh5emdHbjlXeFo2YUc2bmcrT05lWDkyVTFSNFwvRit0R2tFbHhcL2ZFbFA0TzJ5RnJkelU1cFBJdiszSWJuQms3b1c5VmFNamwwcTZ6cExYUFA0ZW44RlJmMEhUTG1lU2ZcL0wyMzJaUmdqRXAwZllqT0dVQXYzUDFwbVkiLCJtYWMiOiJjMjRmOWY0ZmQ2MDZjYWVjMThhMjkyYTc3ZjA2ZGFjY2JkNzJhYjI1MGMyNWU0Y2RjYTA1NDY3N2YxMzE1OGFlIn0%3D;laravel_session=eyJpdiI6InIzaDVzcGVKSkNzTXVwQmhGWStaMmc9PSIsInZhbHVlIjoibllOV3gydHhvTXRpY3JxYmFCS1R3cVUwXC92ZGpaamVjZTJ6N0xzdXJKclQrY3V5QlJ5RGoySzJJcWtpS21jSHY5cjFVVktzV2YyRW1tVWVMQ2pENWdDQXJ1TVdhM0dCSkgrbFZETEVvYWtHNnA0Y1dNamVObHdLa1B1NXlwbnhRIiwibWFjIjoiZjI4M2U5MGZmNjIzYjAyMzUzY2YxNTI0NTRhY2Y4OGJjOGQwNTBmNDJlYWQxZjhhMWFmZmEwZmRlZWM2ZWY2OCJ9 Accept-Language: en-US,* Host: b3789e93786d.ngrok.io
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 200 OK
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:48:55 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;
/* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
<title>Appointments</title>
<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
<link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
<link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
</head>
<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
<header class="app-header navbar">
<button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
<span class="navbar-toggler-icon"></span>
</button>
<a class="navbar-brand" href="#">
<span class="navbar-brand-full">Appointments</span>
<span class="navbar-brand-minimized">Appointments</span>
</a>
<button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
<span class="navbar-toggler-icon"></span>
</button>
<ul class="nav navbar-nav ml-auto">
</ul>
</header>
<div class="app-body">
<div class="sidebar">
<nav class="sidebar-nav">
<ul class="nav">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
<i class="nav-icon fas fa-fw fa-tachometer-alt">
</i>
Dashboard
</a>
</li>
<li class="nav-item nav-dropdown">
<a class="nav-link nav-dropdown-toggle" href="#">
<i class="fa-fw fas fa-users nav-icon">
</i>
User management
</a>
<ul class="nav-dropdown-items">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
<i class="fa-fw fas fa-unlock-alt nav-icon">
</i>
Permissions
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
<i class="fa-fw fas fa-briefcase nav-icon">
</i>
Roles
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
<i class="fa-fw fas fa-user nav-icon">
</i>
Users
</a>
</li>
</ul>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Services
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Employees
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Clients
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Appointments
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
<i class="nav-icon fa-fw fas fa-calendar">
</i>
Calendar
</a>
</li>
<li class="nav-item">
<a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
<i class="nav-icon fas fa-fw fa-sign-out-alt">
</i>
Logout
</a>
</li>
</ul>
</nav>
<button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div> <main class="main">
<div style="padding-top: 20px" class="container-fluid">
<div class="card">
<div class="card-header">
Show Permissions
</div>
<div class="card-body">
<div class="mb-2">
<table class="table table-bordered table-striped">
<tbody>
<tr>
<th>
ID
</th>
<td>
11
</td>
</tr>
<tr>
<th>
Title
</th>
<td>
role_access
</td>
</tr>
</tbody>
</table>
<a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
Back to list
</a>
</div>
<nav class="mb-3">
<div class="nav nav-tabs">
</div>
</nav>
<div class="tab-content">
</div>
</div>
</div>
</div>
</main>
<form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
<input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
</form>
</div>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://b3789e93786d.ngrok.io/js/main.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
$(function() {
let copyButtonTrans = 'Copy'
let csvButtonTrans = 'CSV'
let excelButtonTrans = 'Excel'
let pdfButtonTrans = 'PDF'
let printButtonTrans = 'Print'
let colvisButtonTrans = 'Column visibility'
let languages = {
'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
};
$.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
$.extend(true, $.fn.dataTable.defaults, {
language: {
url: languages['en']
},
columnDefs: [{
orderable: false,
className: 'select-checkbox',
targets: 0
}, {
orderable: false,
searchable: false,
targets: -1
}],
select: {
style: 'multi+shift',
selector: 'td:first-child'
},
order: [],
scrollX: true,
pageLength: 100,
dom: 'lBfrtip<"actions">',
buttons: [
{
extend: 'copy',
className: 'btn-default',
text: copyButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'csv',
className: 'btn-default',
text: csvButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'excel',
className: 'btn-default',
text: excelButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'pdf',
className: 'btn-default',
text: pdfButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'print',
className: 'btn-default',
text: printButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'colvis',
className: 'btn-default',
text: colvisButtonTrans,
exportOptions: {
columns: ':visible'
}
}
]
});
$.fn.dataTable.ext.classes.sPageButton = '';
});
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
</body>
</html>
This is the browser-evaluated body, as a result of the listed transitions.
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 | <html><head><script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script> /* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */ window._arachni_js_namespace = true; /* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */ </script> <!-- Injected by Arachni::Browser::Javascript --> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> <title>Appointments</title> <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet"> <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet"> <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet"> <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet"> <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet"> </head> <body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show"> <header class="app-header navbar"> <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show"> <span class="navbar-toggler-icon"></span> </button> <a class="navbar-brand" href="#"> <span class="navbar-brand-full">Appointments</span> <span class="navbar-brand-minimized">Appointments</span> </a> <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show"> <span class="navbar-toggler-icon"></span> </button> <ul class="nav navbar-nav ml-auto"> </ul> </header> <div class="app-body"> <div class="sidebar"> <nav class="sidebar-nav"> <ul class="nav"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link" data-arachni-id="209607824"> <i class="nav-icon fas fa-fw fa-tachometer-alt"> </i> Dashboard </a> </li> <li class="nav-item nav-dropdown"> <a class="nav-link nav-dropdown-toggle" href="#"> <i class="fa-fw fas fa-users nav-icon"> </i> User management </a> <ul class="nav-dropdown-items"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active" data-arachni-id="1555521058"> <i class="fa-fw fas fa-unlock-alt nav-icon"> </i> Permissions </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link " data-arachni-id="-1170485759"> <i class="fa-fw fas fa-briefcase nav-icon"> </i> Roles </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link " data-arachni-id="-832018167"> <i class="fa-fw fas fa-user nav-icon"> </i> Users </a> </li> </ul> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link " data-arachni-id="-932905896"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Services </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link " data-arachni-id="-692569287"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Employees </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link " data-arachni-id="-2088011370"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Clients </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link " data-arachni-id="-57651262"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Appointments </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link " data-arachni-id="-2134217464"> <i class="nav-icon fa-fw fas fa-calendar"> </i> Calendar </a> </li> <li class="nav-item"> <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();" data-arachni-id="273839128"> <i class="nav-icon fas fa-fw fa-sign-out-alt"> </i> Logout </a> </li> </ul> </nav> <button class="sidebar-minimizer brand-minimizer" type="button"></button> </div> <main class="main"> <div style="padding-top: 20px" class="container-fluid"> <div class="card"> <div class="card-header"> Show Permissions </div> <div class="card-body"> <div class="mb-2"> <table class="table table-bordered table-striped"> <tbody> <tr> <th> ID </th> <td> 11 </td> </tr> <tr> <th> Title </th> <td> role_access </td> </tr> </tbody> </table> <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions"> Back to list </a> </div> <nav class="mb-3"> <div class="nav nav-tabs"> </div> </nav> <div class="tab-content"> </div> </div> </div> </div> </main> <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;"> <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> </form> </div> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://b3789e93786d.ngrok.io/js/main.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); $(function() { let copyButtonTrans = 'Copy' let csvButtonTrans = 'CSV' let excelButtonTrans = 'Excel' let pdfButtonTrans = 'PDF' let printButtonTrans = 'Print' let colvisButtonTrans = 'Column visibility' let languages = { 'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json' }; $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' }) $.extend(true, $.fn.dataTable.defaults, { language: { url: languages['en'] }, columnDefs: [{ orderable: false, className: 'select-checkbox', targets: 0 }, { orderable: false, searchable: false, targets: -1 }], select: { style: 'multi+shift', selector: 'td:first-child' }, order: [], scrollX: true, pageLength: 100, dom: 'lBfrtip<"actions">', buttons: [ { extend: 'copy', className: 'btn-default', text: copyButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'csv', className: 'btn-default', text: csvButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'excel', className: 'btn-default', text: excelButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'pdf', className: 'btn-default', text: pdfButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'print', className: 'btn-default', text: printButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'colvis', className: 'btn-default', text: colvisButtonTrans, exportOptions: { columns: ':visible' } } ] }); $.fn.dataTable.ext.classes.sPageButton = ''; }); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> </body></html> |
This is the original HTTP response body.
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 | <script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script> /* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */ window._arachni_js_namespace = true; /* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */ </script> <!-- Injected by Arachni::Browser::Javascript --> <!DOCTYPE html> <html> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> <title>Appointments</title> <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" /> <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" /> <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" /> <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" /> </head> <body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show"> <header class="app-header navbar"> <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show"> <span class="navbar-toggler-icon"></span> </button> <a class="navbar-brand" href="#"> <span class="navbar-brand-full">Appointments</span> <span class="navbar-brand-minimized">Appointments</span> </a> <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show"> <span class="navbar-toggler-icon"></span> </button> <ul class="nav navbar-nav ml-auto"> </ul> </header> <div class="app-body"> <div class="sidebar"> <nav class="sidebar-nav"> <ul class="nav"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link"> <i class="nav-icon fas fa-fw fa-tachometer-alt"> </i> Dashboard </a> </li> <li class="nav-item nav-dropdown"> <a class="nav-link nav-dropdown-toggle" href="#"> <i class="fa-fw fas fa-users nav-icon"> </i> User management </a> <ul class="nav-dropdown-items"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active"> <i class="fa-fw fas fa-unlock-alt nav-icon"> </i> Permissions </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link "> <i class="fa-fw fas fa-briefcase nav-icon"> </i> Roles </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link "> <i class="fa-fw fas fa-user nav-icon"> </i> Users </a> </li> </ul> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Services </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Employees </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Clients </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Appointments </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link "> <i class="nav-icon fa-fw fas fa-calendar"> </i> Calendar </a> </li> <li class="nav-item"> <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();"> <i class="nav-icon fas fa-fw fa-sign-out-alt"> </i> Logout </a> </li> </ul> </nav> <button class="sidebar-minimizer brand-minimizer" type="button"></button> </div> <main class="main"> <div style="padding-top: 20px" class="container-fluid"> <div class="card"> <div class="card-header"> Show Permissions </div> <div class="card-body"> <div class="mb-2"> <table class="table table-bordered table-striped"> <tbody> <tr> <th> ID </th> <td> 11 </td> </tr> <tr> <th> Title </th> <td> role_access </td> </tr> </tbody> </table> <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions"> Back to list </a> </div> <nav class="mb-3"> <div class="nav nav-tabs"> </div> </nav> <div class="tab-content"> </div> </div> </div> </div> </main> <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;"> <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> </form> </div> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://b3789e93786d.ngrok.io/js/main.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); $(function() { let copyButtonTrans = 'Copy' let csvButtonTrans = 'CSV' let excelButtonTrans = 'Excel' let pdfButtonTrans = 'PDF' let printButtonTrans = 'Print' let colvisButtonTrans = 'Column visibility' let languages = { 'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json' }; $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' }) $.extend(true, $.fn.dataTable.defaults, { language: { url: languages['en'] }, columnDefs: [{ orderable: false, className: 'select-checkbox', targets: 0 }, { orderable: false, searchable: false, targets: -1 }], select: { style: 'multi+shift', selector: 'td:first-child' }, order: [], scrollX: true, pageLength: 100, dom: 'lBfrtip<"actions">', buttons: [ { extend: 'copy', className: 'btn-default', text: copyButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'csv', className: 'btn-default', text: csvButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'excel', className: 'btn-default', text: excelButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'pdf', className: 'btn-default', text: pdfButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'print', className: 'btn-default', text: printButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'colvis', className: 'btn-default', text: colvisButtonTrans, exportOptions: { columns: ':visible' } } ] }); $.fn.dataTable.ext.classes.sPageButton = ''; }); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> </body> </html> |
server
using
GET
at
http://b3789e93786d.ngrok.io/admin/permissions/11%20(4th%20copy)/
pointing to
http://b3789e93786d.ngrok.io/admin/permissions/11%20(4th%20copy)/
.
System components have attached some insights to this issue.
| Proof |
|---|
HTTP/1.1 200 OK |
Raw HTTP request used to retrieve the page.
GET /admin/permissions/11%20(4th%20copy)/ HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D;laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 200 OK
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:56:31 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6ImlDTE01cDd2dmV3eXRITHZrRVwvOGtnPT0iLCJ2YWx1ZSI6Ilp3c2hjejIyTlZadWlWU0Y2MFBVdVNLUCt2YXViaDNuY3ZSUmdPWjlQcEpJTEdWbVoyVENFXC9zMjI5UUcxeVg2VE4ra29tZEZqZXdLbitmWElISmdaalZJQ0xZXC84TGdiUVNSKzYzdzZxTVUraXR3WkZKblN5S1crUVZYTTE2YksiLCJtYWMiOiI5MjU5YTFhMzVkZDgyZGM0ZTRmMTM5MmE3MTkzNjBiZDkzNTVkZjEzMDljYWNmNjI1Njk1NDEyZDg1MzdlY2NmIn0%3D; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6IitoT0VVY0RJUDNYQ3gxYVRERE9LRWc9PSIsInZhbHVlIjoiVmJXenF1SUVKcWlnaTV1Nzcwcjg2YVpSNTRVQnhQNktCZ0s3eGprcXA5b3VYSkxQS3FSYk01bEZXSHFlTFUxVlloKzkxcTZHUHExMFMwbTkzbTNaYlZ1WHgrUHVBbVlLTnFmcmtMUjRsVDJNdHE5QlAxbnZES3dmQ3RVR1B0aWMiLCJtYWMiOiJlZjFmNGMzY2E4YTZjOGU3OWM4M2I1MzE3MzY2MjU3YzY5MDg4ZGVhMWFlNjRkODYwMTM5YjEwYmYxNzExZDRiIn0%3D; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
<title>Appointments</title>
<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
<link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
<link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
</head>
<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
<header class="app-header navbar">
<button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
<span class="navbar-toggler-icon"></span>
</button>
<a class="navbar-brand" href="#">
<span class="navbar-brand-full">Appointments</span>
<span class="navbar-brand-minimized">Appointments</span>
</a>
<button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
<span class="navbar-toggler-icon"></span>
</button>
<ul class="nav navbar-nav ml-auto">
</ul>
</header>
<div class="app-body">
<div class="sidebar">
<nav class="sidebar-nav">
<ul class="nav">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
<i class="nav-icon fas fa-fw fa-tachometer-alt">
</i>
Dashboard
</a>
</li>
<li class="nav-item nav-dropdown">
<a class="nav-link nav-dropdown-toggle" href="#">
<i class="fa-fw fas fa-users nav-icon">
</i>
User management
</a>
<ul class="nav-dropdown-items">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
<i class="fa-fw fas fa-unlock-alt nav-icon">
</i>
Permissions
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
<i class="fa-fw fas fa-briefcase nav-icon">
</i>
Roles
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
<i class="fa-fw fas fa-user nav-icon">
</i>
Users
</a>
</li>
</ul>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Services
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Employees
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Clients
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Appointments
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
<i class="nav-icon fa-fw fas fa-calendar">
</i>
Calendar
</a>
</li>
<li class="nav-item">
<a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
<i class="nav-icon fas fa-fw fa-sign-out-alt">
</i>
Logout
</a>
</li>
</ul>
</nav>
<button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div> <main class="main">
<div style="padding-top: 20px" class="container-fluid">
<div class="card">
<div class="card-header">
Show Permissions
</div>
<div class="card-body">
<div class="mb-2">
<table class="table table-bordered table-striped">
<tbody>
<tr>
<th>
ID
</th>
<td>
11
</td>
</tr>
<tr>
<th>
Title
</th>
<td>
role_access
</td>
</tr>
</tbody>
</table>
<a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions/11%20(copy)">
Back to list
</a>
</div>
<nav class="mb-3">
<div class="nav nav-tabs">
</div>
</nav>
<div class="tab-content">
</div>
</div>
</div>
</div>
</main>
<form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
<input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
</form>
</div>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"></script>
<script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"></script>
<script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
<script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
<script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"></script>
<script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"></script>
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"></script>
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"></script>
<script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"></script>
<script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"></script>
<script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"></script>
<script src="http://b3789e93786d.ngrok.io/js/main.js"></script>
<script>
$(function() {
let copyButtonTrans = 'Copy'
let csvButtonTrans = 'CSV'
let excelButtonTrans = 'Excel'
let pdfButtonTrans = 'PDF'
let printButtonTrans = 'Print'
let colvisButtonTrans = 'Column visibility'
let languages = {
'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
};
$.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
$.extend(true, $.fn.dataTable.defaults, {
language: {
url: languages['en']
},
columnDefs: [{
orderable: false,
className: 'select-checkbox',
targets: 0
}, {
orderable: false,
searchable: false,
targets: -1
}],
select: {
style: 'multi+shift',
selector: 'td:first-child'
},
order: [],
scrollX: true,
pageLength: 100,
dom: 'lBfrtip<"actions">',
buttons: [
{
extend: 'copy',
className: 'btn-default',
text: copyButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'csv',
className: 'btn-default',
text: csvButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'excel',
className: 'btn-default',
text: excelButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'pdf',
className: 'btn-default',
text: pdfButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'print',
className: 'btn-default',
text: printButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'colvis',
className: 'btn-default',
text: colvisButtonTrans,
exportOptions: {
columns: ':visible'
}
}
]
});
$.fn.dataTable.ext.classes.sPageButton = '';
});
</script>
</body>
</html>
Transitions describe the steps required to restore the state of the page, to the one it had when it was processed by the scanner, as a series of events. In essence, each transition represents a user interaction.
| # | Time | Event | Element | Options | ||
|---|---|---|---|---|---|---|
| 0 | 1.860287 | load |
page
|
|
||
| 1 | 1.31688 | request |
http://b3789e93786d.ngrok.io/admin/permissions |
|
||
| 2 | 1.77744 | click |
<a class="btn btn-xs btn-primary" href="http://b3789e93786d.ngrok.io/admin/permissions/11">
|
|
||
| 3 | 1.07014 | request |
http://b3789e93786d.ngrok.io/admin/permissions/11 |
|
Raw HTTP request used to retrieve the page.
GET /admin/permissions/11 HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Referer: http://b3789e93786d.ngrok.io/admin/permissions Cookie: XSRF-TOKEN=eyJpdiI6IitiaU03VENMNzRtQzZJTGtZTVBPdWc9PSIsInZhbHVlIjoiZGIzQmxpWXh5emdHbjlXeFo2YUc2bmcrT05lWDkyVTFSNFwvRit0R2tFbHhcL2ZFbFA0TzJ5RnJkelU1cFBJdiszSWJuQms3b1c5VmFNamwwcTZ6cExYUFA0ZW44RlJmMEhUTG1lU2ZcL0wyMzJaUmdqRXAwZllqT0dVQXYzUDFwbVkiLCJtYWMiOiJjMjRmOWY0ZmQ2MDZjYWVjMThhMjkyYTc3ZjA2ZGFjY2JkNzJhYjI1MGMyNWU0Y2RjYTA1NDY3N2YxMzE1OGFlIn0%3D;laravel_session=eyJpdiI6InIzaDVzcGVKSkNzTXVwQmhGWStaMmc9PSIsInZhbHVlIjoibllOV3gydHhvTXRpY3JxYmFCS1R3cVUwXC92ZGpaamVjZTJ6N0xzdXJKclQrY3V5QlJ5RGoySzJJcWtpS21jSHY5cjFVVktzV2YyRW1tVWVMQ2pENWdDQXJ1TVdhM0dCSkgrbFZETEVvYWtHNnA0Y1dNamVObHdLa1B1NXlwbnhRIiwibWFjIjoiZjI4M2U5MGZmNjIzYjAyMzUzY2YxNTI0NTRhY2Y4OGJjOGQwNTBmNDJlYWQxZjhhMWFmZmEwZmRlZWM2ZWY2OCJ9 Accept-Language: en-US,* Host: b3789e93786d.ngrok.io
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 200 OK
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:48:55 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;
/* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
<title>Appointments</title>
<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
<link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
<link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
</head>
<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
<header class="app-header navbar">
<button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
<span class="navbar-toggler-icon"></span>
</button>
<a class="navbar-brand" href="#">
<span class="navbar-brand-full">Appointments</span>
<span class="navbar-brand-minimized">Appointments</span>
</a>
<button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
<span class="navbar-toggler-icon"></span>
</button>
<ul class="nav navbar-nav ml-auto">
</ul>
</header>
<div class="app-body">
<div class="sidebar">
<nav class="sidebar-nav">
<ul class="nav">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
<i class="nav-icon fas fa-fw fa-tachometer-alt">
</i>
Dashboard
</a>
</li>
<li class="nav-item nav-dropdown">
<a class="nav-link nav-dropdown-toggle" href="#">
<i class="fa-fw fas fa-users nav-icon">
</i>
User management
</a>
<ul class="nav-dropdown-items">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
<i class="fa-fw fas fa-unlock-alt nav-icon">
</i>
Permissions
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
<i class="fa-fw fas fa-briefcase nav-icon">
</i>
Roles
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
<i class="fa-fw fas fa-user nav-icon">
</i>
Users
</a>
</li>
</ul>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Services
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Employees
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Clients
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Appointments
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
<i class="nav-icon fa-fw fas fa-calendar">
</i>
Calendar
</a>
</li>
<li class="nav-item">
<a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
<i class="nav-icon fas fa-fw fa-sign-out-alt">
</i>
Logout
</a>
</li>
</ul>
</nav>
<button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div> <main class="main">
<div style="padding-top: 20px" class="container-fluid">
<div class="card">
<div class="card-header">
Show Permissions
</div>
<div class="card-body">
<div class="mb-2">
<table class="table table-bordered table-striped">
<tbody>
<tr>
<th>
ID
</th>
<td>
11
</td>
</tr>
<tr>
<th>
Title
</th>
<td>
role_access
</td>
</tr>
</tbody>
</table>
<a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
Back to list
</a>
</div>
<nav class="mb-3">
<div class="nav nav-tabs">
</div>
</nav>
<div class="tab-content">
</div>
</div>
</div>
</div>
</main>
<form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
<input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
</form>
</div>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://b3789e93786d.ngrok.io/js/main.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
$(function() {
let copyButtonTrans = 'Copy'
let csvButtonTrans = 'CSV'
let excelButtonTrans = 'Excel'
let pdfButtonTrans = 'PDF'
let printButtonTrans = 'Print'
let colvisButtonTrans = 'Column visibility'
let languages = {
'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
};
$.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
$.extend(true, $.fn.dataTable.defaults, {
language: {
url: languages['en']
},
columnDefs: [{
orderable: false,
className: 'select-checkbox',
targets: 0
}, {
orderable: false,
searchable: false,
targets: -1
}],
select: {
style: 'multi+shift',
selector: 'td:first-child'
},
order: [],
scrollX: true,
pageLength: 100,
dom: 'lBfrtip<"actions">',
buttons: [
{
extend: 'copy',
className: 'btn-default',
text: copyButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'csv',
className: 'btn-default',
text: csvButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'excel',
className: 'btn-default',
text: excelButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'pdf',
className: 'btn-default',
text: pdfButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'print',
className: 'btn-default',
text: printButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'colvis',
className: 'btn-default',
text: colvisButtonTrans,
exportOptions: {
columns: ':visible'
}
}
]
});
$.fn.dataTable.ext.classes.sPageButton = '';
});
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
</body>
</html>
This is the browser-evaluated body, as a result of the listed transitions.
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 | <html><head><script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script> /* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */ window._arachni_js_namespace = true; /* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */ </script> <!-- Injected by Arachni::Browser::Javascript --> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> <title>Appointments</title> <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet"> <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet"> <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet"> <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet"> <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet"> </head> <body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show"> <header class="app-header navbar"> <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show"> <span class="navbar-toggler-icon"></span> </button> <a class="navbar-brand" href="#"> <span class="navbar-brand-full">Appointments</span> <span class="navbar-brand-minimized">Appointments</span> </a> <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show"> <span class="navbar-toggler-icon"></span> </button> <ul class="nav navbar-nav ml-auto"> </ul> </header> <div class="app-body"> <div class="sidebar"> <nav class="sidebar-nav"> <ul class="nav"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link" data-arachni-id="209607824"> <i class="nav-icon fas fa-fw fa-tachometer-alt"> </i> Dashboard </a> </li> <li class="nav-item nav-dropdown"> <a class="nav-link nav-dropdown-toggle" href="#"> <i class="fa-fw fas fa-users nav-icon"> </i> User management </a> <ul class="nav-dropdown-items"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active" data-arachni-id="1555521058"> <i class="fa-fw fas fa-unlock-alt nav-icon"> </i> Permissions </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link " data-arachni-id="-1170485759"> <i class="fa-fw fas fa-briefcase nav-icon"> </i> Roles </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link " data-arachni-id="-832018167"> <i class="fa-fw fas fa-user nav-icon"> </i> Users </a> </li> </ul> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link " data-arachni-id="-932905896"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Services </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link " data-arachni-id="-692569287"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Employees </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link " data-arachni-id="-2088011370"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Clients </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link " data-arachni-id="-57651262"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Appointments </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link " data-arachni-id="-2134217464"> <i class="nav-icon fa-fw fas fa-calendar"> </i> Calendar </a> </li> <li class="nav-item"> <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();" data-arachni-id="273839128"> <i class="nav-icon fas fa-fw fa-sign-out-alt"> </i> Logout </a> </li> </ul> </nav> <button class="sidebar-minimizer brand-minimizer" type="button"></button> </div> <main class="main"> <div style="padding-top: 20px" class="container-fluid"> <div class="card"> <div class="card-header"> Show Permissions </div> <div class="card-body"> <div class="mb-2"> <table class="table table-bordered table-striped"> <tbody> <tr> <th> ID </th> <td> 11 </td> </tr> <tr> <th> Title </th> <td> role_access </td> </tr> </tbody> </table> <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions"> Back to list </a> </div> <nav class="mb-3"> <div class="nav nav-tabs"> </div> </nav> <div class="tab-content"> </div> </div> </div> </div> </main> <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;"> <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> </form> </div> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://b3789e93786d.ngrok.io/js/main.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); $(function() { let copyButtonTrans = 'Copy' let csvButtonTrans = 'CSV' let excelButtonTrans = 'Excel' let pdfButtonTrans = 'PDF' let printButtonTrans = 'Print' let colvisButtonTrans = 'Column visibility' let languages = { 'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json' }; $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' }) $.extend(true, $.fn.dataTable.defaults, { language: { url: languages['en'] }, columnDefs: [{ orderable: false, className: 'select-checkbox', targets: 0 }, { orderable: false, searchable: false, targets: -1 }], select: { style: 'multi+shift', selector: 'td:first-child' }, order: [], scrollX: true, pageLength: 100, dom: 'lBfrtip<"actions">', buttons: [ { extend: 'copy', className: 'btn-default', text: copyButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'csv', className: 'btn-default', text: csvButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'excel', className: 'btn-default', text: excelButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'pdf', className: 'btn-default', text: pdfButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'print', className: 'btn-default', text: printButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'colvis', className: 'btn-default', text: colvisButtonTrans, exportOptions: { columns: ':visible' } } ] }); $.fn.dataTable.ext.classes.sPageButton = ''; }); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> </body></html> |
This is the original HTTP response body.
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 | <script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script> /* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */ window._arachni_js_namespace = true; /* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */ </script> <!-- Injected by Arachni::Browser::Javascript --> <!DOCTYPE html> <html> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> <title>Appointments</title> <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" /> <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" /> <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" /> <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" /> </head> <body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show"> <header class="app-header navbar"> <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show"> <span class="navbar-toggler-icon"></span> </button> <a class="navbar-brand" href="#"> <span class="navbar-brand-full">Appointments</span> <span class="navbar-brand-minimized">Appointments</span> </a> <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show"> <span class="navbar-toggler-icon"></span> </button> <ul class="nav navbar-nav ml-auto"> </ul> </header> <div class="app-body"> <div class="sidebar"> <nav class="sidebar-nav"> <ul class="nav"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link"> <i class="nav-icon fas fa-fw fa-tachometer-alt"> </i> Dashboard </a> </li> <li class="nav-item nav-dropdown"> <a class="nav-link nav-dropdown-toggle" href="#"> <i class="fa-fw fas fa-users nav-icon"> </i> User management </a> <ul class="nav-dropdown-items"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active"> <i class="fa-fw fas fa-unlock-alt nav-icon"> </i> Permissions </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link "> <i class="fa-fw fas fa-briefcase nav-icon"> </i> Roles </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link "> <i class="fa-fw fas fa-user nav-icon"> </i> Users </a> </li> </ul> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Services </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Employees </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Clients </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Appointments </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link "> <i class="nav-icon fa-fw fas fa-calendar"> </i> Calendar </a> </li> <li class="nav-item"> <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();"> <i class="nav-icon fas fa-fw fa-sign-out-alt"> </i> Logout </a> </li> </ul> </nav> <button class="sidebar-minimizer brand-minimizer" type="button"></button> </div> <main class="main"> <div style="padding-top: 20px" class="container-fluid"> <div class="card"> <div class="card-header"> Show Permissions </div> <div class="card-body"> <div class="mb-2"> <table class="table table-bordered table-striped"> <tbody> <tr> <th> ID </th> <td> 11 </td> </tr> <tr> <th> Title </th> <td> role_access </td> </tr> </tbody> </table> <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions"> Back to list </a> </div> <nav class="mb-3"> <div class="nav nav-tabs"> </div> </nav> <div class="tab-content"> </div> </div> </div> </div> </main> <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;"> <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> </form> </div> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://b3789e93786d.ngrok.io/js/main.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); $(function() { let copyButtonTrans = 'Copy' let csvButtonTrans = 'CSV' let excelButtonTrans = 'Excel' let pdfButtonTrans = 'PDF' let printButtonTrans = 'Print' let colvisButtonTrans = 'Column visibility' let languages = { 'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json' }; $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' }) $.extend(true, $.fn.dataTable.defaults, { language: { url: languages['en'] }, columnDefs: [{ orderable: false, className: 'select-checkbox', targets: 0 }, { orderable: false, searchable: false, targets: -1 }], select: { style: 'multi+shift', selector: 'td:first-child' }, order: [], scrollX: true, pageLength: 100, dom: 'lBfrtip<"actions">', buttons: [ { extend: 'copy', className: 'btn-default', text: copyButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'csv', className: 'btn-default', text: csvButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'excel', className: 'btn-default', text: excelButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'pdf', className: 'btn-default', text: pdfButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'print', className: 'btn-default', text: printButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'colvis', className: 'btn-default', text: colvisButtonTrans, exportOptions: { columns: ':visible' } } ] }); $.fn.dataTable.ext.classes.sPageButton = ''; }); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> </body> </html> |
server
using
GET
at
http://b3789e93786d.ngrok.io/admin/permissions/11%20(3rd%20copy)/
pointing to
http://b3789e93786d.ngrok.io/admin/permissions/11%20(3rd%20copy)/
.
System components have attached some insights to this issue.
| Proof |
|---|
HTTP/1.1 200 OK |
Raw HTTP request used to retrieve the page.
GET /admin/permissions/11%20(3rd%20copy)/ HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D;laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 200 OK
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:56:31 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6IkpuZUJLNWNBbkdsVCtEV05uVUE2N0E9PSIsInZhbHVlIjoieUpQTWZsdHdCaGFaNnhMWnJ6eldxZk1VUUNHNnArU3ptTzNFRE1LQlpCU2M0VU9cL2g0bjNwNm12K1B6V2ZCSFR3MG9hUXdaSjNhMVNLRVwvT2Y3NStuT0pqcjJXOGNGZlBnK3BuOWIrempTZHNJZVdvekJJdlwvZWUwUldmQWhJaVciLCJtYWMiOiJiNzYzZjY3Zjk1YTFmZDY3YTQ5YWY4Mjc0MjJjYmQ1YzJiYTIyODdmOWJlZWUzM2QyNDE2NjI2ODk5OGIxOTE1In0%3D; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6IktGRVgyWEpEK2xDTjQ3VFZlT0NKdWc9PSIsInZhbHVlIjoiOWpvSzdEbENTM2VsSGRzb1JUOXBjZUkzR1JvQXdqT0dsUDhsUlIzMTJabkxNVmxsU3FKWVQ5cUVpVjJKNURXUlViV2lVeG1KcTRWRUNlaG5QSzBMR2dENE1GRTlJQ3BJZUZDeDVvVW5KaFpVMDZwWnBRenRQdDY4XC9ndXNHZm56IiwibWFjIjoiNTg2NGQyMjE2OTBiNzA4YmY2YWQ2MzJjNzlkMTk5NWVlY2E4OTE0ZmYzZTRkZGQ0ODFmYjk1YTFiOGU4YzRhZCJ9; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
<title>Appointments</title>
<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
<link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
<link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
</head>
<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
<header class="app-header navbar">
<button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
<span class="navbar-toggler-icon"></span>
</button>
<a class="navbar-brand" href="#">
<span class="navbar-brand-full">Appointments</span>
<span class="navbar-brand-minimized">Appointments</span>
</a>
<button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
<span class="navbar-toggler-icon"></span>
</button>
<ul class="nav navbar-nav ml-auto">
</ul>
</header>
<div class="app-body">
<div class="sidebar">
<nav class="sidebar-nav">
<ul class="nav">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
<i class="nav-icon fas fa-fw fa-tachometer-alt">
</i>
Dashboard
</a>
</li>
<li class="nav-item nav-dropdown">
<a class="nav-link nav-dropdown-toggle" href="#">
<i class="fa-fw fas fa-users nav-icon">
</i>
User management
</a>
<ul class="nav-dropdown-items">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
<i class="fa-fw fas fa-unlock-alt nav-icon">
</i>
Permissions
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
<i class="fa-fw fas fa-briefcase nav-icon">
</i>
Roles
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
<i class="fa-fw fas fa-user nav-icon">
</i>
Users
</a>
</li>
</ul>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Services
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Employees
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Clients
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Appointments
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
<i class="nav-icon fa-fw fas fa-calendar">
</i>
Calendar
</a>
</li>
<li class="nav-item">
<a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
<i class="nav-icon fas fa-fw fa-sign-out-alt">
</i>
Logout
</a>
</li>
</ul>
</nav>
<button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div> <main class="main">
<div style="padding-top: 20px" class="container-fluid">
<div class="card">
<div class="card-header">
Show Permissions
</div>
<div class="card-body">
<div class="mb-2">
<table class="table table-bordered table-striped">
<tbody>
<tr>
<th>
ID
</th>
<td>
11
</td>
</tr>
<tr>
<th>
Title
</th>
<td>
role_access
</td>
</tr>
</tbody>
</table>
<a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions/11%20(copy)">
Back to list
</a>
</div>
<nav class="mb-3">
<div class="nav nav-tabs">
</div>
</nav>
<div class="tab-content">
</div>
</div>
</div>
</div>
</main>
<form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
<input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
</form>
</div>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"></script>
<script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"></script>
<script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
<script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
<script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"></script>
<script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"></script>
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"></script>
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"></script>
<script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"></script>
<script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"></script>
<script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"></script>
<script src="http://b3789e93786d.ngrok.io/js/main.js"></script>
<script>
$(function() {
let copyButtonTrans = 'Copy'
let csvButtonTrans = 'CSV'
let excelButtonTrans = 'Excel'
let pdfButtonTrans = 'PDF'
let printButtonTrans = 'Print'
let colvisButtonTrans = 'Column visibility'
let languages = {
'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
};
$.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
$.extend(true, $.fn.dataTable.defaults, {
language: {
url: languages['en']
},
columnDefs: [{
orderable: false,
className: 'select-checkbox',
targets: 0
}, {
orderable: false,
searchable: false,
targets: -1
}],
select: {
style: 'multi+shift',
selector: 'td:first-child'
},
order: [],
scrollX: true,
pageLength: 100,
dom: 'lBfrtip<"actions">',
buttons: [
{
extend: 'copy',
className: 'btn-default',
text: copyButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'csv',
className: 'btn-default',
text: csvButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'excel',
className: 'btn-default',
text: excelButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'pdf',
className: 'btn-default',
text: pdfButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'print',
className: 'btn-default',
text: printButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'colvis',
className: 'btn-default',
text: colvisButtonTrans,
exportOptions: {
columns: ':visible'
}
}
]
});
$.fn.dataTable.ext.classes.sPageButton = '';
});
</script>
</body>
</html>
Transitions describe the steps required to restore the state of the page, to the one it had when it was processed by the scanner, as a series of events. In essence, each transition represents a user interaction.
| # | Time | Event | Element | Options | ||
|---|---|---|---|---|---|---|
| 0 | 1.860287 | load |
page
|
|
||
| 1 | 1.31688 | request |
http://b3789e93786d.ngrok.io/admin/permissions |
|
||
| 2 | 1.77744 | click |
<a class="btn btn-xs btn-primary" href="http://b3789e93786d.ngrok.io/admin/permissions/11">
|
|
||
| 3 | 1.07014 | request |
http://b3789e93786d.ngrok.io/admin/permissions/11 |
|
Raw HTTP request used to retrieve the page.
GET /admin/permissions/11 HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Referer: http://b3789e93786d.ngrok.io/admin/permissions Cookie: XSRF-TOKEN=eyJpdiI6IitiaU03VENMNzRtQzZJTGtZTVBPdWc9PSIsInZhbHVlIjoiZGIzQmxpWXh5emdHbjlXeFo2YUc2bmcrT05lWDkyVTFSNFwvRit0R2tFbHhcL2ZFbFA0TzJ5RnJkelU1cFBJdiszSWJuQms3b1c5VmFNamwwcTZ6cExYUFA0ZW44RlJmMEhUTG1lU2ZcL0wyMzJaUmdqRXAwZllqT0dVQXYzUDFwbVkiLCJtYWMiOiJjMjRmOWY0ZmQ2MDZjYWVjMThhMjkyYTc3ZjA2ZGFjY2JkNzJhYjI1MGMyNWU0Y2RjYTA1NDY3N2YxMzE1OGFlIn0%3D;laravel_session=eyJpdiI6InIzaDVzcGVKSkNzTXVwQmhGWStaMmc9PSIsInZhbHVlIjoibllOV3gydHhvTXRpY3JxYmFCS1R3cVUwXC92ZGpaamVjZTJ6N0xzdXJKclQrY3V5QlJ5RGoySzJJcWtpS21jSHY5cjFVVktzV2YyRW1tVWVMQ2pENWdDQXJ1TVdhM0dCSkgrbFZETEVvYWtHNnA0Y1dNamVObHdLa1B1NXlwbnhRIiwibWFjIjoiZjI4M2U5MGZmNjIzYjAyMzUzY2YxNTI0NTRhY2Y4OGJjOGQwNTBmNDJlYWQxZjhhMWFmZmEwZmRlZWM2ZWY2OCJ9 Accept-Language: en-US,* Host: b3789e93786d.ngrok.io
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 200 OK
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:48:55 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;
/* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
<title>Appointments</title>
<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
<link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
<link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
</head>
<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
<header class="app-header navbar">
<button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
<span class="navbar-toggler-icon"></span>
</button>
<a class="navbar-brand" href="#">
<span class="navbar-brand-full">Appointments</span>
<span class="navbar-brand-minimized">Appointments</span>
</a>
<button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
<span class="navbar-toggler-icon"></span>
</button>
<ul class="nav navbar-nav ml-auto">
</ul>
</header>
<div class="app-body">
<div class="sidebar">
<nav class="sidebar-nav">
<ul class="nav">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
<i class="nav-icon fas fa-fw fa-tachometer-alt">
</i>
Dashboard
</a>
</li>
<li class="nav-item nav-dropdown">
<a class="nav-link nav-dropdown-toggle" href="#">
<i class="fa-fw fas fa-users nav-icon">
</i>
User management
</a>
<ul class="nav-dropdown-items">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
<i class="fa-fw fas fa-unlock-alt nav-icon">
</i>
Permissions
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
<i class="fa-fw fas fa-briefcase nav-icon">
</i>
Roles
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
<i class="fa-fw fas fa-user nav-icon">
</i>
Users
</a>
</li>
</ul>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Services
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Employees
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Clients
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Appointments
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
<i class="nav-icon fa-fw fas fa-calendar">
</i>
Calendar
</a>
</li>
<li class="nav-item">
<a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
<i class="nav-icon fas fa-fw fa-sign-out-alt">
</i>
Logout
</a>
</li>
</ul>
</nav>
<button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div> <main class="main">
<div style="padding-top: 20px" class="container-fluid">
<div class="card">
<div class="card-header">
Show Permissions
</div>
<div class="card-body">
<div class="mb-2">
<table class="table table-bordered table-striped">
<tbody>
<tr>
<th>
ID
</th>
<td>
11
</td>
</tr>
<tr>
<th>
Title
</th>
<td>
role_access
</td>
</tr>
</tbody>
</table>
<a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
Back to list
</a>
</div>
<nav class="mb-3">
<div class="nav nav-tabs">
</div>
</nav>
<div class="tab-content">
</div>
</div>
</div>
</div>
</main>
<form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
<input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
</form>
</div>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://b3789e93786d.ngrok.io/js/main.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
$(function() {
let copyButtonTrans = 'Copy'
let csvButtonTrans = 'CSV'
let excelButtonTrans = 'Excel'
let pdfButtonTrans = 'PDF'
let printButtonTrans = 'Print'
let colvisButtonTrans = 'Column visibility'
let languages = {
'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
};
$.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
$.extend(true, $.fn.dataTable.defaults, {
language: {
url: languages['en']
},
columnDefs: [{
orderable: false,
className: 'select-checkbox',
targets: 0
}, {
orderable: false,
searchable: false,
targets: -1
}],
select: {
style: 'multi+shift',
selector: 'td:first-child'
},
order: [],
scrollX: true,
pageLength: 100,
dom: 'lBfrtip<"actions">',
buttons: [
{
extend: 'copy',
className: 'btn-default',
text: copyButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'csv',
className: 'btn-default',
text: csvButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'excel',
className: 'btn-default',
text: excelButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'pdf',
className: 'btn-default',
text: pdfButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'print',
className: 'btn-default',
text: printButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'colvis',
className: 'btn-default',
text: colvisButtonTrans,
exportOptions: {
columns: ':visible'
}
}
]
});
$.fn.dataTable.ext.classes.sPageButton = '';
});
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
</body>
</html>
This is the browser-evaluated body, as a result of the listed transitions.
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 | <html><head><script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script> /* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */ window._arachni_js_namespace = true; /* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */ </script> <!-- Injected by Arachni::Browser::Javascript --> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> <title>Appointments</title> <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet"> <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet"> <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet"> <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet"> <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet"> </head> <body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show"> <header class="app-header navbar"> <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show"> <span class="navbar-toggler-icon"></span> </button> <a class="navbar-brand" href="#"> <span class="navbar-brand-full">Appointments</span> <span class="navbar-brand-minimized">Appointments</span> </a> <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show"> <span class="navbar-toggler-icon"></span> </button> <ul class="nav navbar-nav ml-auto"> </ul> </header> <div class="app-body"> <div class="sidebar"> <nav class="sidebar-nav"> <ul class="nav"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link" data-arachni-id="209607824"> <i class="nav-icon fas fa-fw fa-tachometer-alt"> </i> Dashboard </a> </li> <li class="nav-item nav-dropdown"> <a class="nav-link nav-dropdown-toggle" href="#"> <i class="fa-fw fas fa-users nav-icon"> </i> User management </a> <ul class="nav-dropdown-items"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active" data-arachni-id="1555521058"> <i class="fa-fw fas fa-unlock-alt nav-icon"> </i> Permissions </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link " data-arachni-id="-1170485759"> <i class="fa-fw fas fa-briefcase nav-icon"> </i> Roles </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link " data-arachni-id="-832018167"> <i class="fa-fw fas fa-user nav-icon"> </i> Users </a> </li> </ul> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link " data-arachni-id="-932905896"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Services </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link " data-arachni-id="-692569287"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Employees </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link " data-arachni-id="-2088011370"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Clients </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link " data-arachni-id="-57651262"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Appointments </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link " data-arachni-id="-2134217464"> <i class="nav-icon fa-fw fas fa-calendar"> </i> Calendar </a> </li> <li class="nav-item"> <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();" data-arachni-id="273839128"> <i class="nav-icon fas fa-fw fa-sign-out-alt"> </i> Logout </a> </li> </ul> </nav> <button class="sidebar-minimizer brand-minimizer" type="button"></button> </div> <main class="main"> <div style="padding-top: 20px" class="container-fluid"> <div class="card"> <div class="card-header"> Show Permissions </div> <div class="card-body"> <div class="mb-2"> <table class="table table-bordered table-striped"> <tbody> <tr> <th> ID </th> <td> 11 </td> </tr> <tr> <th> Title </th> <td> role_access </td> </tr> </tbody> </table> <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions"> Back to list </a> </div> <nav class="mb-3"> <div class="nav nav-tabs"> </div> </nav> <div class="tab-content"> </div> </div> </div> </div> </main> <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;"> <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> </form> </div> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://b3789e93786d.ngrok.io/js/main.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); $(function() { let copyButtonTrans = 'Copy' let csvButtonTrans = 'CSV' let excelButtonTrans = 'Excel' let pdfButtonTrans = 'PDF' let printButtonTrans = 'Print' let colvisButtonTrans = 'Column visibility' let languages = { 'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json' }; $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' }) $.extend(true, $.fn.dataTable.defaults, { language: { url: languages['en'] }, columnDefs: [{ orderable: false, className: 'select-checkbox', targets: 0 }, { orderable: false, searchable: false, targets: -1 }], select: { style: 'multi+shift', selector: 'td:first-child' }, order: [], scrollX: true, pageLength: 100, dom: 'lBfrtip<"actions">', buttons: [ { extend: 'copy', className: 'btn-default', text: copyButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'csv', className: 'btn-default', text: csvButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'excel', className: 'btn-default', text: excelButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'pdf', className: 'btn-default', text: pdfButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'print', className: 'btn-default', text: printButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'colvis', className: 'btn-default', text: colvisButtonTrans, exportOptions: { columns: ':visible' } } ] }); $.fn.dataTable.ext.classes.sPageButton = ''; }); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> </body></html> |
This is the original HTTP response body.
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 | <script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script> /* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */ window._arachni_js_namespace = true; /* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */ </script> <!-- Injected by Arachni::Browser::Javascript --> <!DOCTYPE html> <html> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> <title>Appointments</title> <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" /> <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" /> <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" /> <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" /> </head> <body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show"> <header class="app-header navbar"> <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show"> <span class="navbar-toggler-icon"></span> </button> <a class="navbar-brand" href="#"> <span class="navbar-brand-full">Appointments</span> <span class="navbar-brand-minimized">Appointments</span> </a> <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show"> <span class="navbar-toggler-icon"></span> </button> <ul class="nav navbar-nav ml-auto"> </ul> </header> <div class="app-body"> <div class="sidebar"> <nav class="sidebar-nav"> <ul class="nav"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link"> <i class="nav-icon fas fa-fw fa-tachometer-alt"> </i> Dashboard </a> </li> <li class="nav-item nav-dropdown"> <a class="nav-link nav-dropdown-toggle" href="#"> <i class="fa-fw fas fa-users nav-icon"> </i> User management </a> <ul class="nav-dropdown-items"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active"> <i class="fa-fw fas fa-unlock-alt nav-icon"> </i> Permissions </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link "> <i class="fa-fw fas fa-briefcase nav-icon"> </i> Roles </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link "> <i class="fa-fw fas fa-user nav-icon"> </i> Users </a> </li> </ul> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Services </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Employees </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Clients </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Appointments </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link "> <i class="nav-icon fa-fw fas fa-calendar"> </i> Calendar </a> </li> <li class="nav-item"> <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();"> <i class="nav-icon fas fa-fw fa-sign-out-alt"> </i> Logout </a> </li> </ul> </nav> <button class="sidebar-minimizer brand-minimizer" type="button"></button> </div> <main class="main"> <div style="padding-top: 20px" class="container-fluid"> <div class="card"> <div class="card-header"> Show Permissions </div> <div class="card-body"> <div class="mb-2"> <table class="table table-bordered table-striped"> <tbody> <tr> <th> ID </th> <td> 11 </td> </tr> <tr> <th> Title </th> <td> role_access </td> </tr> </tbody> </table> <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions"> Back to list </a> </div> <nav class="mb-3"> <div class="nav nav-tabs"> </div> </nav> <div class="tab-content"> </div> </div> </div> </div> </main> <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;"> <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> </form> </div> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://b3789e93786d.ngrok.io/js/main.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); $(function() { let copyButtonTrans = 'Copy' let csvButtonTrans = 'CSV' let excelButtonTrans = 'Excel' let pdfButtonTrans = 'PDF' let printButtonTrans = 'Print' let colvisButtonTrans = 'Column visibility' let languages = { 'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json' }; $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' }) $.extend(true, $.fn.dataTable.defaults, { language: { url: languages['en'] }, columnDefs: [{ orderable: false, className: 'select-checkbox', targets: 0 }, { orderable: false, searchable: false, targets: -1 }], select: { style: 'multi+shift', selector: 'td:first-child' }, order: [], scrollX: true, pageLength: 100, dom: 'lBfrtip<"actions">', buttons: [ { extend: 'copy', className: 'btn-default', text: copyButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'csv', className: 'btn-default', text: csvButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'excel', className: 'btn-default', text: excelButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'pdf', className: 'btn-default', text: pdfButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'print', className: 'btn-default', text: printButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'colvis', className: 'btn-default', text: colvisButtonTrans, exportOptions: { columns: ':visible' } } ] }); $.fn.dataTable.ext.classes.sPageButton = ''; }); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> </body> </html> |
server
using
GET
at
http://b3789e93786d.ngrok.io/admin/permissions/11%20(copy)/
pointing to
http://b3789e93786d.ngrok.io/admin/permissions/11%20(copy)/
.
System components have attached some insights to this issue.
| Proof |
|---|
HTTP/1.1 200 OK |
Raw HTTP request used to retrieve the page.
GET /admin/permissions/11%20(copy)/ HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D;laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 200 OK
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:56:31 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6Ink0ZngyTkhTYU1tdmtOamhERXZFVXc9PSIsInZhbHVlIjoiSklvWGdIU0pKdlVwbWoxYVlmMHduYlNWV3gyNFFVVmoyVnZPUkd0cU5ZMXdnXC95QTN3elwvbEFOeFpxUjFyY0tsWnNadHRnYjZYVFwvemNjN2tMemtONE9MVW8zUXpDR05tck83alhNdER5QTNrUm9LWUd6ZUdRSnlOazZUc0RRQngiLCJtYWMiOiI0MmM0ZTc4NWMzM2YwNWRlMjMzNTI0Y2FiZjFkOWFjYzllZDVmZWVkMzk4M2JkZjNjMmNlNTYyZWFjYWYzMDczIn0%3D; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6IkpVTkpOM3JUejl4T0U4VE1weTVEeUE9PSIsInZhbHVlIjoiUitDMDh4SWZPT2Z5MzFtWDBuWVdCK3VrcGhjZ2xjcU1mbkpxc2dMU0t5SHpGSFllWE44MFRQdkYzeGtPVVwvcnFzT1BSWExxV01QXC82THczak1CM0YzbytqTFlNR3ZaaWR4SDhNN2Z1b3lPOUpsVGlsY3FNUmJJY2FkR1Yrb1EzWCIsIm1hYyI6ImE4OGQxYmI5Yjc1MjllOWUyM2Y1Yzc5ODJkODRmN2E2ODYwMjkwYzY3NDcxY2I2MmZmMzNhMzRmZjVhZDMwZTYifQ%3D%3D; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
<title>Appointments</title>
<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
<link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
<link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
</head>
<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
<header class="app-header navbar">
<button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
<span class="navbar-toggler-icon"></span>
</button>
<a class="navbar-brand" href="#">
<span class="navbar-brand-full">Appointments</span>
<span class="navbar-brand-minimized">Appointments</span>
</a>
<button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
<span class="navbar-toggler-icon"></span>
</button>
<ul class="nav navbar-nav ml-auto">
</ul>
</header>
<div class="app-body">
<div class="sidebar">
<nav class="sidebar-nav">
<ul class="nav">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
<i class="nav-icon fas fa-fw fa-tachometer-alt">
</i>
Dashboard
</a>
</li>
<li class="nav-item nav-dropdown">
<a class="nav-link nav-dropdown-toggle" href="#">
<i class="fa-fw fas fa-users nav-icon">
</i>
User management
</a>
<ul class="nav-dropdown-items">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
<i class="fa-fw fas fa-unlock-alt nav-icon">
</i>
Permissions
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
<i class="fa-fw fas fa-briefcase nav-icon">
</i>
Roles
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
<i class="fa-fw fas fa-user nav-icon">
</i>
Users
</a>
</li>
</ul>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Services
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Employees
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Clients
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Appointments
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
<i class="nav-icon fa-fw fas fa-calendar">
</i>
Calendar
</a>
</li>
<li class="nav-item">
<a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
<i class="nav-icon fas fa-fw fa-sign-out-alt">
</i>
Logout
</a>
</li>
</ul>
</nav>
<button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div> <main class="main">
<div style="padding-top: 20px" class="container-fluid">
<div class="card">
<div class="card-header">
Show Permissions
</div>
<div class="card-body">
<div class="mb-2">
<table class="table table-bordered table-striped">
<tbody>
<tr>
<th>
ID
</th>
<td>
11
</td>
</tr>
<tr>
<th>
Title
</th>
<td>
role_access
</td>
</tr>
</tbody>
</table>
<a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions/11/edit">
Back to list
</a>
</div>
<nav class="mb-3">
<div class="nav nav-tabs">
</div>
</nav>
<div class="tab-content">
</div>
</div>
</div>
</div>
</main>
<form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
<input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
</form>
</div>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"></script>
<script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"></script>
<script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
<script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
<script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"></script>
<script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"></script>
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"></script>
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"></script>
<script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"></script>
<script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"></script>
<script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"></script>
<script src="http://b3789e93786d.ngrok.io/js/main.js"></script>
<script>
$(function() {
let copyButtonTrans = 'Copy'
let csvButtonTrans = 'CSV'
let excelButtonTrans = 'Excel'
let pdfButtonTrans = 'PDF'
let printButtonTrans = 'Print'
let colvisButtonTrans = 'Column visibility'
let languages = {
'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
};
$.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
$.extend(true, $.fn.dataTable.defaults, {
language: {
url: languages['en']
},
columnDefs: [{
orderable: false,
className: 'select-checkbox',
targets: 0
}, {
orderable: false,
searchable: false,
targets: -1
}],
select: {
style: 'multi+shift',
selector: 'td:first-child'
},
order: [],
scrollX: true,
pageLength: 100,
dom: 'lBfrtip<"actions">',
buttons: [
{
extend: 'copy',
className: 'btn-default',
text: copyButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'csv',
className: 'btn-default',
text: csvButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'excel',
className: 'btn-default',
text: excelButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'pdf',
className: 'btn-default',
text: pdfButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'print',
className: 'btn-default',
text: printButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'colvis',
className: 'btn-default',
text: colvisButtonTrans,
exportOptions: {
columns: ':visible'
}
}
]
});
$.fn.dataTable.ext.classes.sPageButton = '';
});
</script>
</body>
</html>
Transitions describe the steps required to restore the state of the page, to the one it had when it was processed by the scanner, as a series of events. In essence, each transition represents a user interaction.
| # | Time | Event | Element | Options | ||
|---|---|---|---|---|---|---|
| 0 | 1.860287 | load |
page
|
|
||
| 1 | 1.31688 | request |
http://b3789e93786d.ngrok.io/admin/permissions |
|
||
| 2 | 1.77744 | click |
<a class="btn btn-xs btn-primary" href="http://b3789e93786d.ngrok.io/admin/permissions/11">
|
|
||
| 3 | 1.07014 | request |
http://b3789e93786d.ngrok.io/admin/permissions/11 |
|
Raw HTTP request used to retrieve the page.
GET /admin/permissions/11 HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Referer: http://b3789e93786d.ngrok.io/admin/permissions Cookie: XSRF-TOKEN=eyJpdiI6IitiaU03VENMNzRtQzZJTGtZTVBPdWc9PSIsInZhbHVlIjoiZGIzQmxpWXh5emdHbjlXeFo2YUc2bmcrT05lWDkyVTFSNFwvRit0R2tFbHhcL2ZFbFA0TzJ5RnJkelU1cFBJdiszSWJuQms3b1c5VmFNamwwcTZ6cExYUFA0ZW44RlJmMEhUTG1lU2ZcL0wyMzJaUmdqRXAwZllqT0dVQXYzUDFwbVkiLCJtYWMiOiJjMjRmOWY0ZmQ2MDZjYWVjMThhMjkyYTc3ZjA2ZGFjY2JkNzJhYjI1MGMyNWU0Y2RjYTA1NDY3N2YxMzE1OGFlIn0%3D;laravel_session=eyJpdiI6InIzaDVzcGVKSkNzTXVwQmhGWStaMmc9PSIsInZhbHVlIjoibllOV3gydHhvTXRpY3JxYmFCS1R3cVUwXC92ZGpaamVjZTJ6N0xzdXJKclQrY3V5QlJ5RGoySzJJcWtpS21jSHY5cjFVVktzV2YyRW1tVWVMQ2pENWdDQXJ1TVdhM0dCSkgrbFZETEVvYWtHNnA0Y1dNamVObHdLa1B1NXlwbnhRIiwibWFjIjoiZjI4M2U5MGZmNjIzYjAyMzUzY2YxNTI0NTRhY2Y4OGJjOGQwNTBmNDJlYWQxZjhhMWFmZmEwZmRlZWM2ZWY2OCJ9 Accept-Language: en-US,* Host: b3789e93786d.ngrok.io
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 200 OK
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:48:55 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;
/* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
<title>Appointments</title>
<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
<link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
<link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
</head>
<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
<header class="app-header navbar">
<button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
<span class="navbar-toggler-icon"></span>
</button>
<a class="navbar-brand" href="#">
<span class="navbar-brand-full">Appointments</span>
<span class="navbar-brand-minimized">Appointments</span>
</a>
<button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
<span class="navbar-toggler-icon"></span>
</button>
<ul class="nav navbar-nav ml-auto">
</ul>
</header>
<div class="app-body">
<div class="sidebar">
<nav class="sidebar-nav">
<ul class="nav">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
<i class="nav-icon fas fa-fw fa-tachometer-alt">
</i>
Dashboard
</a>
</li>
<li class="nav-item nav-dropdown">
<a class="nav-link nav-dropdown-toggle" href="#">
<i class="fa-fw fas fa-users nav-icon">
</i>
User management
</a>
<ul class="nav-dropdown-items">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
<i class="fa-fw fas fa-unlock-alt nav-icon">
</i>
Permissions
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
<i class="fa-fw fas fa-briefcase nav-icon">
</i>
Roles
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
<i class="fa-fw fas fa-user nav-icon">
</i>
Users
</a>
</li>
</ul>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Services
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Employees
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Clients
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Appointments
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
<i class="nav-icon fa-fw fas fa-calendar">
</i>
Calendar
</a>
</li>
<li class="nav-item">
<a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
<i class="nav-icon fas fa-fw fa-sign-out-alt">
</i>
Logout
</a>
</li>
</ul>
</nav>
<button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div> <main class="main">
<div style="padding-top: 20px" class="container-fluid">
<div class="card">
<div class="card-header">
Show Permissions
</div>
<div class="card-body">
<div class="mb-2">
<table class="table table-bordered table-striped">
<tbody>
<tr>
<th>
ID
</th>
<td>
11
</td>
</tr>
<tr>
<th>
Title
</th>
<td>
role_access
</td>
</tr>
</tbody>
</table>
<a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
Back to list
</a>
</div>
<nav class="mb-3">
<div class="nav nav-tabs">
</div>
</nav>
<div class="tab-content">
</div>
</div>
</div>
</div>
</main>
<form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
<input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
</form>
</div>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://b3789e93786d.ngrok.io/js/main.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
$(function() {
let copyButtonTrans = 'Copy'
let csvButtonTrans = 'CSV'
let excelButtonTrans = 'Excel'
let pdfButtonTrans = 'PDF'
let printButtonTrans = 'Print'
let colvisButtonTrans = 'Column visibility'
let languages = {
'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
};
$.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
$.extend(true, $.fn.dataTable.defaults, {
language: {
url: languages['en']
},
columnDefs: [{
orderable: false,
className: 'select-checkbox',
targets: 0
}, {
orderable: false,
searchable: false,
targets: -1
}],
select: {
style: 'multi+shift',
selector: 'td:first-child'
},
order: [],
scrollX: true,
pageLength: 100,
dom: 'lBfrtip<"actions">',
buttons: [
{
extend: 'copy',
className: 'btn-default',
text: copyButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'csv',
className: 'btn-default',
text: csvButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'excel',
className: 'btn-default',
text: excelButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'pdf',
className: 'btn-default',
text: pdfButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'print',
className: 'btn-default',
text: printButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'colvis',
className: 'btn-default',
text: colvisButtonTrans,
exportOptions: {
columns: ':visible'
}
}
]
});
$.fn.dataTable.ext.classes.sPageButton = '';
});
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
</body>
</html>
This is the browser-evaluated body, as a result of the listed transitions.
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 | <html><head><script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script> /* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */ window._arachni_js_namespace = true; /* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */ </script> <!-- Injected by Arachni::Browser::Javascript --> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> <title>Appointments</title> <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet"> <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet"> <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet"> <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet"> <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet"> </head> <body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show"> <header class="app-header navbar"> <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show"> <span class="navbar-toggler-icon"></span> </button> <a class="navbar-brand" href="#"> <span class="navbar-brand-full">Appointments</span> <span class="navbar-brand-minimized">Appointments</span> </a> <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show"> <span class="navbar-toggler-icon"></span> </button> <ul class="nav navbar-nav ml-auto"> </ul> </header> <div class="app-body"> <div class="sidebar"> <nav class="sidebar-nav"> <ul class="nav"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link" data-arachni-id="209607824"> <i class="nav-icon fas fa-fw fa-tachometer-alt"> </i> Dashboard </a> </li> <li class="nav-item nav-dropdown"> <a class="nav-link nav-dropdown-toggle" href="#"> <i class="fa-fw fas fa-users nav-icon"> </i> User management </a> <ul class="nav-dropdown-items"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active" data-arachni-id="1555521058"> <i class="fa-fw fas fa-unlock-alt nav-icon"> </i> Permissions </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link " data-arachni-id="-1170485759"> <i class="fa-fw fas fa-briefcase nav-icon"> </i> Roles </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link " data-arachni-id="-832018167"> <i class="fa-fw fas fa-user nav-icon"> </i> Users </a> </li> </ul> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link " data-arachni-id="-932905896"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Services </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link " data-arachni-id="-692569287"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Employees </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link " data-arachni-id="-2088011370"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Clients </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link " data-arachni-id="-57651262"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Appointments </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link " data-arachni-id="-2134217464"> <i class="nav-icon fa-fw fas fa-calendar"> </i> Calendar </a> </li> <li class="nav-item"> <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();" data-arachni-id="273839128"> <i class="nav-icon fas fa-fw fa-sign-out-alt"> </i> Logout </a> </li> </ul> </nav> <button class="sidebar-minimizer brand-minimizer" type="button"></button> </div> <main class="main"> <div style="padding-top: 20px" class="container-fluid"> <div class="card"> <div class="card-header"> Show Permissions </div> <div class="card-body"> <div class="mb-2"> <table class="table table-bordered table-striped"> <tbody> <tr> <th> ID </th> <td> 11 </td> </tr> <tr> <th> Title </th> <td> role_access </td> </tr> </tbody> </table> <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions"> Back to list </a> </div> <nav class="mb-3"> <div class="nav nav-tabs"> </div> </nav> <div class="tab-content"> </div> </div> </div> </div> </main> <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;"> <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> </form> </div> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://b3789e93786d.ngrok.io/js/main.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); $(function() { let copyButtonTrans = 'Copy' let csvButtonTrans = 'CSV' let excelButtonTrans = 'Excel' let pdfButtonTrans = 'PDF' let printButtonTrans = 'Print' let colvisButtonTrans = 'Column visibility' let languages = { 'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json' }; $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' }) $.extend(true, $.fn.dataTable.defaults, { language: { url: languages['en'] }, columnDefs: [{ orderable: false, className: 'select-checkbox', targets: 0 }, { orderable: false, searchable: false, targets: -1 }], select: { style: 'multi+shift', selector: 'td:first-child' }, order: [], scrollX: true, pageLength: 100, dom: 'lBfrtip<"actions">', buttons: [ { extend: 'copy', className: 'btn-default', text: copyButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'csv', className: 'btn-default', text: csvButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'excel', className: 'btn-default', text: excelButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'pdf', className: 'btn-default', text: pdfButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'print', className: 'btn-default', text: printButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'colvis', className: 'btn-default', text: colvisButtonTrans, exportOptions: { columns: ':visible' } } ] }); $.fn.dataTable.ext.classes.sPageButton = ''; }); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> </body></html> |
This is the original HTTP response body.
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 | <script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script> /* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */ window._arachni_js_namespace = true; /* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */ </script> <!-- Injected by Arachni::Browser::Javascript --> <!DOCTYPE html> <html> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> <title>Appointments</title> <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" /> <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" /> <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" /> <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" /> </head> <body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show"> <header class="app-header navbar"> <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show"> <span class="navbar-toggler-icon"></span> </button> <a class="navbar-brand" href="#"> <span class="navbar-brand-full">Appointments</span> <span class="navbar-brand-minimized">Appointments</span> </a> <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show"> <span class="navbar-toggler-icon"></span> </button> <ul class="nav navbar-nav ml-auto"> </ul> </header> <div class="app-body"> <div class="sidebar"> <nav class="sidebar-nav"> <ul class="nav"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link"> <i class="nav-icon fas fa-fw fa-tachometer-alt"> </i> Dashboard </a> </li> <li class="nav-item nav-dropdown"> <a class="nav-link nav-dropdown-toggle" href="#"> <i class="fa-fw fas fa-users nav-icon"> </i> User management </a> <ul class="nav-dropdown-items"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active"> <i class="fa-fw fas fa-unlock-alt nav-icon"> </i> Permissions </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link "> <i class="fa-fw fas fa-briefcase nav-icon"> </i> Roles </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link "> <i class="fa-fw fas fa-user nav-icon"> </i> Users </a> </li> </ul> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Services </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Employees </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Clients </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Appointments </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link "> <i class="nav-icon fa-fw fas fa-calendar"> </i> Calendar </a> </li> <li class="nav-item"> <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();"> <i class="nav-icon fas fa-fw fa-sign-out-alt"> </i> Logout </a> </li> </ul> </nav> <button class="sidebar-minimizer brand-minimizer" type="button"></button> </div> <main class="main"> <div style="padding-top: 20px" class="container-fluid"> <div class="card"> <div class="card-header"> Show Permissions </div> <div class="card-body"> <div class="mb-2"> <table class="table table-bordered table-striped"> <tbody> <tr> <th> ID </th> <td> 11 </td> </tr> <tr> <th> Title </th> <td> role_access </td> </tr> </tbody> </table> <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions"> Back to list </a> </div> <nav class="mb-3"> <div class="nav nav-tabs"> </div> </nav> <div class="tab-content"> </div> </div> </div> </div> </main> <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;"> <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> </form> </div> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://b3789e93786d.ngrok.io/js/main.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); $(function() { let copyButtonTrans = 'Copy' let csvButtonTrans = 'CSV' let excelButtonTrans = 'Excel' let pdfButtonTrans = 'PDF' let printButtonTrans = 'Print' let colvisButtonTrans = 'Column visibility' let languages = { 'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json' }; $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' }) $.extend(true, $.fn.dataTable.defaults, { language: { url: languages['en'] }, columnDefs: [{ orderable: false, className: 'select-checkbox', targets: 0 }, { orderable: false, searchable: false, targets: -1 }], select: { style: 'multi+shift', selector: 'td:first-child' }, order: [], scrollX: true, pageLength: 100, dom: 'lBfrtip<"actions">', buttons: [ { extend: 'copy', className: 'btn-default', text: copyButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'csv', className: 'btn-default', text: csvButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'excel', className: 'btn-default', text: excelButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'pdf', className: 'btn-default', text: pdfButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'print', className: 'btn-default', text: printButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'colvis', className: 'btn-default', text: colvisButtonTrans, exportOptions: { columns: ':visible' } } ] }); $.fn.dataTable.ext.classes.sPageButton = ''; }); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> </body> </html> |
server
using
GET
at
http://b3789e93786d.ngrok.io/admin/permissions/11%20-%20Copy/
pointing to
http://b3789e93786d.ngrok.io/admin/permissions/11%20-%20Copy/
.
System components have attached some insights to this issue.
| Proof |
|---|
HTTP/1.1 200 OK |
Raw HTTP request used to retrieve the page.
GET /admin/permissions/11%20-%20Copy/ HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D;laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 200 OK
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:56:31 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6ImhGWmxKRDFTTG5IWjdSQ2FTOEhBbXc9PSIsInZhbHVlIjoiWGtcL2daMFQ4dFZpVjJWQXJydTdieGVBaHpiK2RcLzhFSTM5VUtBNVV5Z2FESUtPT1h2N2RCTENDZWErbFBERnppMEVVZ0ZyOXBMdk9hTVFaVHFUZG5aV0NoemJnXC9sQmFSQUx6SnFXcG0yM3BjeXBNcU9KM2YrdGxcL2pkZTR3N1RmIiwibWFjIjoiODNjYzE2ZmFlYmU1MWQxNTVlM2YyMjE3ZGIzMmMxNjM5N2Q3OWIzYWM1YjFkOTE0NDQ0MTE4ODA4MTlhYzQxZiJ9; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6IllLS21PeHo1MDh6WTV5TndZclJKY2c9PSIsInZhbHVlIjoiOFNEUUNFM1wvVFp2aEZ6R0x5cWQxNGs1ZFVPRFk0NVFHQjIxUW56U2c0Z3VyYjR2OVlCMkw3Z3d6d3A3OXdQV2x5bVlJV1hTWSt1TGIrNnNUOWl0Zk5vbVlPZ2JuM2ZLTVZsVU1BQWpHUUY2d1I3N3FBSFgxRjcwa2FvcDJxT01KIiwibWFjIjoiMGI4OGE5ZWNkMzQ3MDk2MjRjZDA3ZDY0MDAxMjk3Y2IyZWYzNmNlNzc0NjZjNzNhNzY1MWZkMTc2NmFiOGU0ZCJ9; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
<title>Appointments</title>
<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
<link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
<link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
</head>
<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
<header class="app-header navbar">
<button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
<span class="navbar-toggler-icon"></span>
</button>
<a class="navbar-brand" href="#">
<span class="navbar-brand-full">Appointments</span>
<span class="navbar-brand-minimized">Appointments</span>
</a>
<button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
<span class="navbar-toggler-icon"></span>
</button>
<ul class="nav navbar-nav ml-auto">
</ul>
</header>
<div class="app-body">
<div class="sidebar">
<nav class="sidebar-nav">
<ul class="nav">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
<i class="nav-icon fas fa-fw fa-tachometer-alt">
</i>
Dashboard
</a>
</li>
<li class="nav-item nav-dropdown">
<a class="nav-link nav-dropdown-toggle" href="#">
<i class="fa-fw fas fa-users nav-icon">
</i>
User management
</a>
<ul class="nav-dropdown-items">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
<i class="fa-fw fas fa-unlock-alt nav-icon">
</i>
Permissions
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
<i class="fa-fw fas fa-briefcase nav-icon">
</i>
Roles
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
<i class="fa-fw fas fa-user nav-icon">
</i>
Users
</a>
</li>
</ul>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Services
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Employees
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Clients
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Appointments
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
<i class="nav-icon fa-fw fas fa-calendar">
</i>
Calendar
</a>
</li>
<li class="nav-item">
<a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
<i class="nav-icon fas fa-fw fa-sign-out-alt">
</i>
Logout
</a>
</li>
</ul>
</nav>
<button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div> <main class="main">
<div style="padding-top: 20px" class="container-fluid">
<div class="card">
<div class="card-header">
Show Permissions
</div>
<div class="card-body">
<div class="mb-2">
<table class="table table-bordered table-striped">
<tbody>
<tr>
<th>
ID
</th>
<td>
11
</td>
</tr>
<tr>
<th>
Title
</th>
<td>
role_access
</td>
</tr>
</tbody>
</table>
<a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions/11~">
Back to list
</a>
</div>
<nav class="mb-3">
<div class="nav nav-tabs">
</div>
</nav>
<div class="tab-content">
</div>
</div>
</div>
</div>
</main>
<form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
<input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
</form>
</div>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"></script>
<script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"></script>
<script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
<script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
<script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"></script>
<script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"></script>
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"></script>
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"></script>
<script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"></script>
<script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"></script>
<script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"></script>
<script src="http://b3789e93786d.ngrok.io/js/main.js"></script>
<script>
$(function() {
let copyButtonTrans = 'Copy'
let csvButtonTrans = 'CSV'
let excelButtonTrans = 'Excel'
let pdfButtonTrans = 'PDF'
let printButtonTrans = 'Print'
let colvisButtonTrans = 'Column visibility'
let languages = {
'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
};
$.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
$.extend(true, $.fn.dataTable.defaults, {
language: {
url: languages['en']
},
columnDefs: [{
orderable: false,
className: 'select-checkbox',
targets: 0
}, {
orderable: false,
searchable: false,
targets: -1
}],
select: {
style: 'multi+shift',
selector: 'td:first-child'
},
order: [],
scrollX: true,
pageLength: 100,
dom: 'lBfrtip<"actions">',
buttons: [
{
extend: 'copy',
className: 'btn-default',
text: copyButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'csv',
className: 'btn-default',
text: csvButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'excel',
className: 'btn-default',
text: excelButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'pdf',
className: 'btn-default',
text: pdfButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'print',
className: 'btn-default',
text: printButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'colvis',
className: 'btn-default',
text: colvisButtonTrans,
exportOptions: {
columns: ':visible'
}
}
]
});
$.fn.dataTable.ext.classes.sPageButton = '';
});
</script>
</body>
</html>
Transitions describe the steps required to restore the state of the page, to the one it had when it was processed by the scanner, as a series of events. In essence, each transition represents a user interaction.
| # | Time | Event | Element | Options | ||
|---|---|---|---|---|---|---|
| 0 | 1.860287 | load |
page
|
|
||
| 1 | 1.31688 | request |
http://b3789e93786d.ngrok.io/admin/permissions |
|
||
| 2 | 1.77744 | click |
<a class="btn btn-xs btn-primary" href="http://b3789e93786d.ngrok.io/admin/permissions/11">
|
|
||
| 3 | 1.07014 | request |
http://b3789e93786d.ngrok.io/admin/permissions/11 |
|
Raw HTTP request used to retrieve the page.
GET /admin/permissions/11 HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Referer: http://b3789e93786d.ngrok.io/admin/permissions Cookie: XSRF-TOKEN=eyJpdiI6IitiaU03VENMNzRtQzZJTGtZTVBPdWc9PSIsInZhbHVlIjoiZGIzQmxpWXh5emdHbjlXeFo2YUc2bmcrT05lWDkyVTFSNFwvRit0R2tFbHhcL2ZFbFA0TzJ5RnJkelU1cFBJdiszSWJuQms3b1c5VmFNamwwcTZ6cExYUFA0ZW44RlJmMEhUTG1lU2ZcL0wyMzJaUmdqRXAwZllqT0dVQXYzUDFwbVkiLCJtYWMiOiJjMjRmOWY0ZmQ2MDZjYWVjMThhMjkyYTc3ZjA2ZGFjY2JkNzJhYjI1MGMyNWU0Y2RjYTA1NDY3N2YxMzE1OGFlIn0%3D;laravel_session=eyJpdiI6InIzaDVzcGVKSkNzTXVwQmhGWStaMmc9PSIsInZhbHVlIjoibllOV3gydHhvTXRpY3JxYmFCS1R3cVUwXC92ZGpaamVjZTJ6N0xzdXJKclQrY3V5QlJ5RGoySzJJcWtpS21jSHY5cjFVVktzV2YyRW1tVWVMQ2pENWdDQXJ1TVdhM0dCSkgrbFZETEVvYWtHNnA0Y1dNamVObHdLa1B1NXlwbnhRIiwibWFjIjoiZjI4M2U5MGZmNjIzYjAyMzUzY2YxNTI0NTRhY2Y4OGJjOGQwNTBmNDJlYWQxZjhhMWFmZmEwZmRlZWM2ZWY2OCJ9 Accept-Language: en-US,* Host: b3789e93786d.ngrok.io
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 200 OK
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:48:55 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;
/* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
<title>Appointments</title>
<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
<link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
<link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
</head>
<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
<header class="app-header navbar">
<button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
<span class="navbar-toggler-icon"></span>
</button>
<a class="navbar-brand" href="#">
<span class="navbar-brand-full">Appointments</span>
<span class="navbar-brand-minimized">Appointments</span>
</a>
<button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
<span class="navbar-toggler-icon"></span>
</button>
<ul class="nav navbar-nav ml-auto">
</ul>
</header>
<div class="app-body">
<div class="sidebar">
<nav class="sidebar-nav">
<ul class="nav">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
<i class="nav-icon fas fa-fw fa-tachometer-alt">
</i>
Dashboard
</a>
</li>
<li class="nav-item nav-dropdown">
<a class="nav-link nav-dropdown-toggle" href="#">
<i class="fa-fw fas fa-users nav-icon">
</i>
User management
</a>
<ul class="nav-dropdown-items">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
<i class="fa-fw fas fa-unlock-alt nav-icon">
</i>
Permissions
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
<i class="fa-fw fas fa-briefcase nav-icon">
</i>
Roles
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
<i class="fa-fw fas fa-user nav-icon">
</i>
Users
</a>
</li>
</ul>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Services
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Employees
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Clients
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Appointments
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
<i class="nav-icon fa-fw fas fa-calendar">
</i>
Calendar
</a>
</li>
<li class="nav-item">
<a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
<i class="nav-icon fas fa-fw fa-sign-out-alt">
</i>
Logout
</a>
</li>
</ul>
</nav>
<button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div> <main class="main">
<div style="padding-top: 20px" class="container-fluid">
<div class="card">
<div class="card-header">
Show Permissions
</div>
<div class="card-body">
<div class="mb-2">
<table class="table table-bordered table-striped">
<tbody>
<tr>
<th>
ID
</th>
<td>
11
</td>
</tr>
<tr>
<th>
Title
</th>
<td>
role_access
</td>
</tr>
</tbody>
</table>
<a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
Back to list
</a>
</div>
<nav class="mb-3">
<div class="nav nav-tabs">
</div>
</nav>
<div class="tab-content">
</div>
</div>
</div>
</div>
</main>
<form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
<input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
</form>
</div>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://b3789e93786d.ngrok.io/js/main.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
$(function() {
let copyButtonTrans = 'Copy'
let csvButtonTrans = 'CSV'
let excelButtonTrans = 'Excel'
let pdfButtonTrans = 'PDF'
let printButtonTrans = 'Print'
let colvisButtonTrans = 'Column visibility'
let languages = {
'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
};
$.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
$.extend(true, $.fn.dataTable.defaults, {
language: {
url: languages['en']
},
columnDefs: [{
orderable: false,
className: 'select-checkbox',
targets: 0
}, {
orderable: false,
searchable: false,
targets: -1
}],
select: {
style: 'multi+shift',
selector: 'td:first-child'
},
order: [],
scrollX: true,
pageLength: 100,
dom: 'lBfrtip<"actions">',
buttons: [
{
extend: 'copy',
className: 'btn-default',
text: copyButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'csv',
className: 'btn-default',
text: csvButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'excel',
className: 'btn-default',
text: excelButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'pdf',
className: 'btn-default',
text: pdfButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'print',
className: 'btn-default',
text: printButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'colvis',
className: 'btn-default',
text: colvisButtonTrans,
exportOptions: {
columns: ':visible'
}
}
]
});
$.fn.dataTable.ext.classes.sPageButton = '';
});
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
</body>
</html>
This is the browser-evaluated body, as a result of the listed transitions.
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 | <html><head><script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script> /* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */ window._arachni_js_namespace = true; /* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */ </script> <!-- Injected by Arachni::Browser::Javascript --> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> <title>Appointments</title> <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet"> <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet"> <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet"> <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet"> <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet"> </head> <body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show"> <header class="app-header navbar"> <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show"> <span class="navbar-toggler-icon"></span> </button> <a class="navbar-brand" href="#"> <span class="navbar-brand-full">Appointments</span> <span class="navbar-brand-minimized">Appointments</span> </a> <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show"> <span class="navbar-toggler-icon"></span> </button> <ul class="nav navbar-nav ml-auto"> </ul> </header> <div class="app-body"> <div class="sidebar"> <nav class="sidebar-nav"> <ul class="nav"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link" data-arachni-id="209607824"> <i class="nav-icon fas fa-fw fa-tachometer-alt"> </i> Dashboard </a> </li> <li class="nav-item nav-dropdown"> <a class="nav-link nav-dropdown-toggle" href="#"> <i class="fa-fw fas fa-users nav-icon"> </i> User management </a> <ul class="nav-dropdown-items"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active" data-arachni-id="1555521058"> <i class="fa-fw fas fa-unlock-alt nav-icon"> </i> Permissions </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link " data-arachni-id="-1170485759"> <i class="fa-fw fas fa-briefcase nav-icon"> </i> Roles </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link " data-arachni-id="-832018167"> <i class="fa-fw fas fa-user nav-icon"> </i> Users </a> </li> </ul> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link " data-arachni-id="-932905896"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Services </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link " data-arachni-id="-692569287"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Employees </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link " data-arachni-id="-2088011370"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Clients </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link " data-arachni-id="-57651262"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Appointments </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link " data-arachni-id="-2134217464"> <i class="nav-icon fa-fw fas fa-calendar"> </i> Calendar </a> </li> <li class="nav-item"> <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();" data-arachni-id="273839128"> <i class="nav-icon fas fa-fw fa-sign-out-alt"> </i> Logout </a> </li> </ul> </nav> <button class="sidebar-minimizer brand-minimizer" type="button"></button> </div> <main class="main"> <div style="padding-top: 20px" class="container-fluid"> <div class="card"> <div class="card-header"> Show Permissions </div> <div class="card-body"> <div class="mb-2"> <table class="table table-bordered table-striped"> <tbody> <tr> <th> ID </th> <td> 11 </td> </tr> <tr> <th> Title </th> <td> role_access </td> </tr> </tbody> </table> <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions"> Back to list </a> </div> <nav class="mb-3"> <div class="nav nav-tabs"> </div> </nav> <div class="tab-content"> </div> </div> </div> </div> </main> <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;"> <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> </form> </div> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://b3789e93786d.ngrok.io/js/main.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); $(function() { let copyButtonTrans = 'Copy' let csvButtonTrans = 'CSV' let excelButtonTrans = 'Excel' let pdfButtonTrans = 'PDF' let printButtonTrans = 'Print' let colvisButtonTrans = 'Column visibility' let languages = { 'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json' }; $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' }) $.extend(true, $.fn.dataTable.defaults, { language: { url: languages['en'] }, columnDefs: [{ orderable: false, className: 'select-checkbox', targets: 0 }, { orderable: false, searchable: false, targets: -1 }], select: { style: 'multi+shift', selector: 'td:first-child' }, order: [], scrollX: true, pageLength: 100, dom: 'lBfrtip<"actions">', buttons: [ { extend: 'copy', className: 'btn-default', text: copyButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'csv', className: 'btn-default', text: csvButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'excel', className: 'btn-default', text: excelButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'pdf', className: 'btn-default', text: pdfButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'print', className: 'btn-default', text: printButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'colvis', className: 'btn-default', text: colvisButtonTrans, exportOptions: { columns: ':visible' } } ] }); $.fn.dataTable.ext.classes.sPageButton = ''; }); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> </body></html> |
This is the original HTTP response body.
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 | <script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script> /* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */ window._arachni_js_namespace = true; /* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */ </script> <!-- Injected by Arachni::Browser::Javascript --> <!DOCTYPE html> <html> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> <title>Appointments</title> <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" /> <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" /> <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" /> <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" /> </head> <body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show"> <header class="app-header navbar"> <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show"> <span class="navbar-toggler-icon"></span> </button> <a class="navbar-brand" href="#"> <span class="navbar-brand-full">Appointments</span> <span class="navbar-brand-minimized">Appointments</span> </a> <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show"> <span class="navbar-toggler-icon"></span> </button> <ul class="nav navbar-nav ml-auto"> </ul> </header> <div class="app-body"> <div class="sidebar"> <nav class="sidebar-nav"> <ul class="nav"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link"> <i class="nav-icon fas fa-fw fa-tachometer-alt"> </i> Dashboard </a> </li> <li class="nav-item nav-dropdown"> <a class="nav-link nav-dropdown-toggle" href="#"> <i class="fa-fw fas fa-users nav-icon"> </i> User management </a> <ul class="nav-dropdown-items"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active"> <i class="fa-fw fas fa-unlock-alt nav-icon"> </i> Permissions </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link "> <i class="fa-fw fas fa-briefcase nav-icon"> </i> Roles </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link "> <i class="fa-fw fas fa-user nav-icon"> </i> Users </a> </li> </ul> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Services </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Employees </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Clients </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Appointments </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link "> <i class="nav-icon fa-fw fas fa-calendar"> </i> Calendar </a> </li> <li class="nav-item"> <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();"> <i class="nav-icon fas fa-fw fa-sign-out-alt"> </i> Logout </a> </li> </ul> </nav> <button class="sidebar-minimizer brand-minimizer" type="button"></button> </div> <main class="main"> <div style="padding-top: 20px" class="container-fluid"> <div class="card"> <div class="card-header"> Show Permissions </div> <div class="card-body"> <div class="mb-2"> <table class="table table-bordered table-striped"> <tbody> <tr> <th> ID </th> <td> 11 </td> </tr> <tr> <th> Title </th> <td> role_access </td> </tr> </tbody> </table> <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions"> Back to list </a> </div> <nav class="mb-3"> <div class="nav nav-tabs"> </div> </nav> <div class="tab-content"> </div> </div> </div> </div> </main> <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;"> <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> </form> </div> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://b3789e93786d.ngrok.io/js/main.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); $(function() { let copyButtonTrans = 'Copy' let csvButtonTrans = 'CSV' let excelButtonTrans = 'Excel' let pdfButtonTrans = 'PDF' let printButtonTrans = 'Print' let colvisButtonTrans = 'Column visibility' let languages = { 'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json' }; $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' }) $.extend(true, $.fn.dataTable.defaults, { language: { url: languages['en'] }, columnDefs: [{ orderable: false, className: 'select-checkbox', targets: 0 }, { orderable: false, searchable: false, targets: -1 }], select: { style: 'multi+shift', selector: 'td:first-child' }, order: [], scrollX: true, pageLength: 100, dom: 'lBfrtip<"actions">', buttons: [ { extend: 'copy', className: 'btn-default', text: copyButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'csv', className: 'btn-default', text: csvButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'excel', className: 'btn-default', text: excelButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'pdf', className: 'btn-default', text: pdfButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'print', className: 'btn-default', text: printButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'colvis', className: 'btn-default', text: colvisButtonTrans, exportOptions: { columns: ':visible' } } ] }); $.fn.dataTable.ext.classes.sPageButton = ''; }); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> </body> </html> |
server
using
GET
at
http://b3789e93786d.ngrok.io/admin/permissions/11%20-%20Copy%20Copy/
pointing to
http://b3789e93786d.ngrok.io/admin/permissions/11%20-%20Copy%20Copy/
.
System components have attached some insights to this issue.
| Proof |
|---|
HTTP/1.1 200 OK |
Raw HTTP request used to retrieve the page.
GET /admin/permissions/11%20-%20Copy%20Copy/ HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D;laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 200 OK
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:56:32 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjZpNGlPcWRXbExwWWNxeVhFMm16NWc9PSIsInZhbHVlIjoiNTM1ZmVPNW03Tmg4Y0o5bCtrcXB0V1A3SVpxR042b1VBNm9WMjRDajhzOEJCTHRFaXI4dUp6VjN3NTEyVFwvdktOYkFicTYzbGhDMXVEeDVzVU5FUUtNZGlZc0dMQXVzSFNZeW9HeEhTWnBLV1dOSHVudHBZbkpXXC84UzJpSnB4RyIsIm1hYyI6IjA4NzU2YjM1ZTkzNjlkMTc0ZjIxMDdmYzg4YTEwMDJiYTFjNjQxYmIwNDdjZWI0ZWExYWQ2NmQ3NTBmZDJlOGEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:56:32 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6Ilg3MUd0U0NOOTcxVmJ6bVdHU1BDbWc9PSIsInZhbHVlIjoiaXlOeUFMZzh0VGRTTXkxZDlOZlBCYXFpODV2RUV0a3NOZTNndmxVOG9UMFwvVnFYWGl2Tm1iODAyV2ZIWVV0RzZHNUpSSG1oeW9UV1lHbVltZEF6ZktzM2hmclwva0FZSmNCWGdQb0wwM09qOFN0QnI2VTVvM1p3YlBtd2hXenkxRyIsIm1hYyI6IjZmNzM3MmUxYTYwZjQ1ZDE4ZjMwMWE0NjA0MjA4ZWNmMTJlNzdjZjM2NmUyOWM1Y2ZhZjAyYjhlNzM1NDk0MmUifQ%3D%3D; expires=Mon, 02-Nov-2020 14:56:32 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
<title>Appointments</title>
<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
<link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
<link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
</head>
<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
<header class="app-header navbar">
<button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
<span class="navbar-toggler-icon"></span>
</button>
<a class="navbar-brand" href="#">
<span class="navbar-brand-full">Appointments</span>
<span class="navbar-brand-minimized">Appointments</span>
</a>
<button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
<span class="navbar-toggler-icon"></span>
</button>
<ul class="nav navbar-nav ml-auto">
</ul>
</header>
<div class="app-body">
<div class="sidebar">
<nav class="sidebar-nav">
<ul class="nav">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
<i class="nav-icon fas fa-fw fa-tachometer-alt">
</i>
Dashboard
</a>
</li>
<li class="nav-item nav-dropdown">
<a class="nav-link nav-dropdown-toggle" href="#">
<i class="fa-fw fas fa-users nav-icon">
</i>
User management
</a>
<ul class="nav-dropdown-items">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
<i class="fa-fw fas fa-unlock-alt nav-icon">
</i>
Permissions
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
<i class="fa-fw fas fa-briefcase nav-icon">
</i>
Roles
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
<i class="fa-fw fas fa-user nav-icon">
</i>
Users
</a>
</li>
</ul>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Services
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Employees
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Clients
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Appointments
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
<i class="nav-icon fa-fw fas fa-calendar">
</i>
Calendar
</a>
</li>
<li class="nav-item">
<a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
<i class="nav-icon fas fa-fw fa-sign-out-alt">
</i>
Logout
</a>
</li>
</ul>
</nav>
<button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div> <main class="main">
<div style="padding-top: 20px" class="container-fluid">
<div class="card">
<div class="card-header">
Show Permissions
</div>
<div class="card-body">
<div class="mb-2">
<table class="table table-bordered table-striped">
<tbody>
<tr>
<th>
ID
</th>
<td>
11
</td>
</tr>
<tr>
<th>
Title
</th>
<td>
role_access
</td>
</tr>
</tbody>
</table>
<a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions/Copy%20of%20Copy%20of%2011">
Back to list
</a>
</div>
<nav class="mb-3">
<div class="nav nav-tabs">
</div>
</nav>
<div class="tab-content">
</div>
</div>
</div>
</div>
</main>
<form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
<input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
</form>
</div>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"></script>
<script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"></script>
<script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
<script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
<script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"></script>
<script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"></script>
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"></script>
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"></script>
<script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"></script>
<script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"></script>
<script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"></script>
<script src="http://b3789e93786d.ngrok.io/js/main.js"></script>
<script>
$(function() {
let copyButtonTrans = 'Copy'
let csvButtonTrans = 'CSV'
let excelButtonTrans = 'Excel'
let pdfButtonTrans = 'PDF'
let printButtonTrans = 'Print'
let colvisButtonTrans = 'Column visibility'
let languages = {
'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
};
$.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
$.extend(true, $.fn.dataTable.defaults, {
language: {
url: languages['en']
},
columnDefs: [{
orderable: false,
className: 'select-checkbox',
targets: 0
}, {
orderable: false,
searchable: false,
targets: -1
}],
select: {
style: 'multi+shift',
selector: 'td:first-child'
},
order: [],
scrollX: true,
pageLength: 100,
dom: 'lBfrtip<"actions">',
buttons: [
{
extend: 'copy',
className: 'btn-default',
text: copyButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'csv',
className: 'btn-default',
text: csvButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'excel',
className: 'btn-default',
text: excelButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'pdf',
className: 'btn-default',
text: pdfButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'print',
className: 'btn-default',
text: printButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'colvis',
className: 'btn-default',
text: colvisButtonTrans,
exportOptions: {
columns: ':visible'
}
}
]
});
$.fn.dataTable.ext.classes.sPageButton = '';
});
</script>
</body>
</html>
Transitions describe the steps required to restore the state of the page, to the one it had when it was processed by the scanner, as a series of events. In essence, each transition represents a user interaction.
| # | Time | Event | Element | Options | ||
|---|---|---|---|---|---|---|
| 0 | 1.860287 | load |
page
|
|
||
| 1 | 1.31688 | request |
http://b3789e93786d.ngrok.io/admin/permissions |
|
||
| 2 | 1.77744 | click |
<a class="btn btn-xs btn-primary" href="http://b3789e93786d.ngrok.io/admin/permissions/11">
|
|
||
| 3 | 1.07014 | request |
http://b3789e93786d.ngrok.io/admin/permissions/11 |
|
Raw HTTP request used to retrieve the page.
GET /admin/permissions/11 HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Referer: http://b3789e93786d.ngrok.io/admin/permissions Cookie: XSRF-TOKEN=eyJpdiI6IitiaU03VENMNzRtQzZJTGtZTVBPdWc9PSIsInZhbHVlIjoiZGIzQmxpWXh5emdHbjlXeFo2YUc2bmcrT05lWDkyVTFSNFwvRit0R2tFbHhcL2ZFbFA0TzJ5RnJkelU1cFBJdiszSWJuQms3b1c5VmFNamwwcTZ6cExYUFA0ZW44RlJmMEhUTG1lU2ZcL0wyMzJaUmdqRXAwZllqT0dVQXYzUDFwbVkiLCJtYWMiOiJjMjRmOWY0ZmQ2MDZjYWVjMThhMjkyYTc3ZjA2ZGFjY2JkNzJhYjI1MGMyNWU0Y2RjYTA1NDY3N2YxMzE1OGFlIn0%3D;laravel_session=eyJpdiI6InIzaDVzcGVKSkNzTXVwQmhGWStaMmc9PSIsInZhbHVlIjoibllOV3gydHhvTXRpY3JxYmFCS1R3cVUwXC92ZGpaamVjZTJ6N0xzdXJKclQrY3V5QlJ5RGoySzJJcWtpS21jSHY5cjFVVktzV2YyRW1tVWVMQ2pENWdDQXJ1TVdhM0dCSkgrbFZETEVvYWtHNnA0Y1dNamVObHdLa1B1NXlwbnhRIiwibWFjIjoiZjI4M2U5MGZmNjIzYjAyMzUzY2YxNTI0NTRhY2Y4OGJjOGQwNTBmNDJlYWQxZjhhMWFmZmEwZmRlZWM2ZWY2OCJ9 Accept-Language: en-US,* Host: b3789e93786d.ngrok.io
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 200 OK
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:48:55 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;
/* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
<title>Appointments</title>
<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
<link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
<link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
</head>
<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
<header class="app-header navbar">
<button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
<span class="navbar-toggler-icon"></span>
</button>
<a class="navbar-brand" href="#">
<span class="navbar-brand-full">Appointments</span>
<span class="navbar-brand-minimized">Appointments</span>
</a>
<button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
<span class="navbar-toggler-icon"></span>
</button>
<ul class="nav navbar-nav ml-auto">
</ul>
</header>
<div class="app-body">
<div class="sidebar">
<nav class="sidebar-nav">
<ul class="nav">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
<i class="nav-icon fas fa-fw fa-tachometer-alt">
</i>
Dashboard
</a>
</li>
<li class="nav-item nav-dropdown">
<a class="nav-link nav-dropdown-toggle" href="#">
<i class="fa-fw fas fa-users nav-icon">
</i>
User management
</a>
<ul class="nav-dropdown-items">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
<i class="fa-fw fas fa-unlock-alt nav-icon">
</i>
Permissions
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
<i class="fa-fw fas fa-briefcase nav-icon">
</i>
Roles
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
<i class="fa-fw fas fa-user nav-icon">
</i>
Users
</a>
</li>
</ul>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Services
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Employees
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Clients
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Appointments
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
<i class="nav-icon fa-fw fas fa-calendar">
</i>
Calendar
</a>
</li>
<li class="nav-item">
<a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
<i class="nav-icon fas fa-fw fa-sign-out-alt">
</i>
Logout
</a>
</li>
</ul>
</nav>
<button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div> <main class="main">
<div style="padding-top: 20px" class="container-fluid">
<div class="card">
<div class="card-header">
Show Permissions
</div>
<div class="card-body">
<div class="mb-2">
<table class="table table-bordered table-striped">
<tbody>
<tr>
<th>
ID
</th>
<td>
11
</td>
</tr>
<tr>
<th>
Title
</th>
<td>
role_access
</td>
</tr>
</tbody>
</table>
<a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
Back to list
</a>
</div>
<nav class="mb-3">
<div class="nav nav-tabs">
</div>
</nav>
<div class="tab-content">
</div>
</div>
</div>
</div>
</main>
<form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
<input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
</form>
</div>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://b3789e93786d.ngrok.io/js/main.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
$(function() {
let copyButtonTrans = 'Copy'
let csvButtonTrans = 'CSV'
let excelButtonTrans = 'Excel'
let pdfButtonTrans = 'PDF'
let printButtonTrans = 'Print'
let colvisButtonTrans = 'Column visibility'
let languages = {
'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
};
$.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
$.extend(true, $.fn.dataTable.defaults, {
language: {
url: languages['en']
},
columnDefs: [{
orderable: false,
className: 'select-checkbox',
targets: 0
}, {
orderable: false,
searchable: false,
targets: -1
}],
select: {
style: 'multi+shift',
selector: 'td:first-child'
},
order: [],
scrollX: true,
pageLength: 100,
dom: 'lBfrtip<"actions">',
buttons: [
{
extend: 'copy',
className: 'btn-default',
text: copyButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'csv',
className: 'btn-default',
text: csvButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'excel',
className: 'btn-default',
text: excelButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'pdf',
className: 'btn-default',
text: pdfButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'print',
className: 'btn-default',
text: printButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'colvis',
className: 'btn-default',
text: colvisButtonTrans,
exportOptions: {
columns: ':visible'
}
}
]
});
$.fn.dataTable.ext.classes.sPageButton = '';
});
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
</body>
</html>
This is the browser-evaluated body, as a result of the listed transitions.
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 | <html><head><script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script> /* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */ window._arachni_js_namespace = true; /* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */ </script> <!-- Injected by Arachni::Browser::Javascript --> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> <title>Appointments</title> <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet"> <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet"> <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet"> <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet"> <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet"> </head> <body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show"> <header class="app-header navbar"> <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show"> <span class="navbar-toggler-icon"></span> </button> <a class="navbar-brand" href="#"> <span class="navbar-brand-full">Appointments</span> <span class="navbar-brand-minimized">Appointments</span> </a> <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show"> <span class="navbar-toggler-icon"></span> </button> <ul class="nav navbar-nav ml-auto"> </ul> </header> <div class="app-body"> <div class="sidebar"> <nav class="sidebar-nav"> <ul class="nav"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link" data-arachni-id="209607824"> <i class="nav-icon fas fa-fw fa-tachometer-alt"> </i> Dashboard </a> </li> <li class="nav-item nav-dropdown"> <a class="nav-link nav-dropdown-toggle" href="#"> <i class="fa-fw fas fa-users nav-icon"> </i> User management </a> <ul class="nav-dropdown-items"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active" data-arachni-id="1555521058"> <i class="fa-fw fas fa-unlock-alt nav-icon"> </i> Permissions </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link " data-arachni-id="-1170485759"> <i class="fa-fw fas fa-briefcase nav-icon"> </i> Roles </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link " data-arachni-id="-832018167"> <i class="fa-fw fas fa-user nav-icon"> </i> Users </a> </li> </ul> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link " data-arachni-id="-932905896"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Services </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link " data-arachni-id="-692569287"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Employees </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link " data-arachni-id="-2088011370"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Clients </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link " data-arachni-id="-57651262"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Appointments </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link " data-arachni-id="-2134217464"> <i class="nav-icon fa-fw fas fa-calendar"> </i> Calendar </a> </li> <li class="nav-item"> <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();" data-arachni-id="273839128"> <i class="nav-icon fas fa-fw fa-sign-out-alt"> </i> Logout </a> </li> </ul> </nav> <button class="sidebar-minimizer brand-minimizer" type="button"></button> </div> <main class="main"> <div style="padding-top: 20px" class="container-fluid"> <div class="card"> <div class="card-header"> Show Permissions </div> <div class="card-body"> <div class="mb-2"> <table class="table table-bordered table-striped"> <tbody> <tr> <th> ID </th> <td> 11 </td> </tr> <tr> <th> Title </th> <td> role_access </td> </tr> </tbody> </table> <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions"> Back to list </a> </div> <nav class="mb-3"> <div class="nav nav-tabs"> </div> </nav> <div class="tab-content"> </div> </div> </div> </div> </main> <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;"> <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> </form> </div> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://b3789e93786d.ngrok.io/js/main.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); $(function() { let copyButtonTrans = 'Copy' let csvButtonTrans = 'CSV' let excelButtonTrans = 'Excel' let pdfButtonTrans = 'PDF' let printButtonTrans = 'Print' let colvisButtonTrans = 'Column visibility' let languages = { 'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json' }; $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' }) $.extend(true, $.fn.dataTable.defaults, { language: { url: languages['en'] }, columnDefs: [{ orderable: false, className: 'select-checkbox', targets: 0 }, { orderable: false, searchable: false, targets: -1 }], select: { style: 'multi+shift', selector: 'td:first-child' }, order: [], scrollX: true, pageLength: 100, dom: 'lBfrtip<"actions">', buttons: [ { extend: 'copy', className: 'btn-default', text: copyButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'csv', className: 'btn-default', text: csvButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'excel', className: 'btn-default', text: excelButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'pdf', className: 'btn-default', text: pdfButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'print', className: 'btn-default', text: printButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'colvis', className: 'btn-default', text: colvisButtonTrans, exportOptions: { columns: ':visible' } } ] }); $.fn.dataTable.ext.classes.sPageButton = ''; }); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> </body></html> |
This is the original HTTP response body.
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 | <script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script> /* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */ window._arachni_js_namespace = true; /* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */ </script> <!-- Injected by Arachni::Browser::Javascript --> <!DOCTYPE html> <html> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> <title>Appointments</title> <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" /> <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" /> <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" /> <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" /> </head> <body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show"> <header class="app-header navbar"> <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show"> <span class="navbar-toggler-icon"></span> </button> <a class="navbar-brand" href="#"> <span class="navbar-brand-full">Appointments</span> <span class="navbar-brand-minimized">Appointments</span> </a> <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show"> <span class="navbar-toggler-icon"></span> </button> <ul class="nav navbar-nav ml-auto"> </ul> </header> <div class="app-body"> <div class="sidebar"> <nav class="sidebar-nav"> <ul class="nav"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link"> <i class="nav-icon fas fa-fw fa-tachometer-alt"> </i> Dashboard </a> </li> <li class="nav-item nav-dropdown"> <a class="nav-link nav-dropdown-toggle" href="#"> <i class="fa-fw fas fa-users nav-icon"> </i> User management </a> <ul class="nav-dropdown-items"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active"> <i class="fa-fw fas fa-unlock-alt nav-icon"> </i> Permissions </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link "> <i class="fa-fw fas fa-briefcase nav-icon"> </i> Roles </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link "> <i class="fa-fw fas fa-user nav-icon"> </i> Users </a> </li> </ul> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Services </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Employees </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Clients </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Appointments </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link "> <i class="nav-icon fa-fw fas fa-calendar"> </i> Calendar </a> </li> <li class="nav-item"> <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();"> <i class="nav-icon fas fa-fw fa-sign-out-alt"> </i> Logout </a> </li> </ul> </nav> <button class="sidebar-minimizer brand-minimizer" type="button"></button> </div> <main class="main"> <div style="padding-top: 20px" class="container-fluid"> <div class="card"> <div class="card-header"> Show Permissions </div> <div class="card-body"> <div class="mb-2"> <table class="table table-bordered table-striped"> <tbody> <tr> <th> ID </th> <td> 11 </td> </tr> <tr> <th> Title </th> <td> role_access </td> </tr> </tbody> </table> <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions"> Back to list </a> </div> <nav class="mb-3"> <div class="nav nav-tabs"> </div> </nav> <div class="tab-content"> </div> </div> </div> </div> </main> <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;"> <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> </form> </div> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://b3789e93786d.ngrok.io/js/main.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); $(function() { let copyButtonTrans = 'Copy' let csvButtonTrans = 'CSV' let excelButtonTrans = 'Excel' let pdfButtonTrans = 'PDF' let printButtonTrans = 'Print' let colvisButtonTrans = 'Column visibility' let languages = { 'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json' }; $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' }) $.extend(true, $.fn.dataTable.defaults, { language: { url: languages['en'] }, columnDefs: [{ orderable: false, className: 'select-checkbox', targets: 0 }, { orderable: false, searchable: false, targets: -1 }], select: { style: 'multi+shift', selector: 'td:first-child' }, order: [], scrollX: true, pageLength: 100, dom: 'lBfrtip<"actions">', buttons: [ { extend: 'copy', className: 'btn-default', text: copyButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'csv', className: 'btn-default', text: csvButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'excel', className: 'btn-default', text: excelButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'pdf', className: 'btn-default', text: pdfButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'print', className: 'btn-default', text: printButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'colvis', className: 'btn-default', text: colvisButtonTrans, exportOptions: { columns: ':visible' } } ] }); $.fn.dataTable.ext.classes.sPageButton = ''; }); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> </body> </html> |
server
using
GET
at
http://b3789e93786d.ngrok.io/admin/permissions/11.cbz
pointing to
http://b3789e93786d.ngrok.io/admin/permissions/11.cbz
.
System components have attached some insights to this issue.
| Proof |
|---|
HTTP/1.1 200 OK |
Raw HTTP request used to retrieve the page.
GET /admin/permissions/11.cbz HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D;laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 200 OK
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:56:31 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6ImZZWDFRYk5PS3dFRGE3dTJHYmx5d3c9PSIsInZhbHVlIjoiQTk4Qkc3NkIrREFuY0hFZTFqWXloN2U5SXltWXROYlZHZXFKdkhQRFYwOW84eDZTeDE3Wmd2dzdUcWlcL2tJMXVCQjR1XC9VTUtuTjRmcStaVFNoSHZVSTZ0cjljXC9rRUtaakpxVlFjT3Y5S3lYc1pDVlZhUnFJeVNlcTdDUWxUTXUiLCJtYWMiOiI2MWY3ZTJiOWEzNDJmMGQxMTY3ZTBlYjE5NzE4OWU2OGExZTBhYTg1NmI0NGU2ZjQ4ZDg3NDNjODFkNjBlZjA0In0%3D; expires=Mon, 02-Nov-2020 14:56:32 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6Iit1N3R1Z3F5RVJyXC9cL1NmYXU1eXc4QT09IiwidmFsdWUiOiJaVWlqaHZhWVB2YUVkQjB0MzBocVNFbmM2bzJ0NHE2Q1o2Ykc3MlA1OEpoamhKMFNpb3ZtWXREMUY2TktMQnJCNWZ6a0liUzkyeEdLaEhHYnhUTXZvV01jR0Rza1F2VENpOUc1TkROdFNEVTI5clZwZ1JFUGdlSVlGTVlaR09XUiIsIm1hYyI6IjE4ODJjNjE5OWEzODM0MDczOTU1MzQ4ZmI5YzU2MDk2ZTNlYzYwZDRiNzA4NDk1ZDc0YzMzZjNjYmI0N2Y1N2YifQ%3D%3D; expires=Mon, 02-Nov-2020 14:56:32 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
<title>Appointments</title>
<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
<link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
<link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
</head>
<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
<header class="app-header navbar">
<button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
<span class="navbar-toggler-icon"></span>
</button>
<a class="navbar-brand" href="#">
<span class="navbar-brand-full">Appointments</span>
<span class="navbar-brand-minimized">Appointments</span>
</a>
<button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
<span class="navbar-toggler-icon"></span>
</button>
<ul class="nav navbar-nav ml-auto">
</ul>
</header>
<div class="app-body">
<div class="sidebar">
<nav class="sidebar-nav">
<ul class="nav">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
<i class="nav-icon fas fa-fw fa-tachometer-alt">
</i>
Dashboard
</a>
</li>
<li class="nav-item nav-dropdown">
<a class="nav-link nav-dropdown-toggle" href="#">
<i class="fa-fw fas fa-users nav-icon">
</i>
User management
</a>
<ul class="nav-dropdown-items">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
<i class="fa-fw fas fa-unlock-alt nav-icon">
</i>
Permissions
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
<i class="fa-fw fas fa-briefcase nav-icon">
</i>
Roles
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
<i class="fa-fw fas fa-user nav-icon">
</i>
Users
</a>
</li>
</ul>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Services
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Employees
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Clients
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Appointments
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
<i class="nav-icon fa-fw fas fa-calendar">
</i>
Calendar
</a>
</li>
<li class="nav-item">
<a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
<i class="nav-icon fas fa-fw fa-sign-out-alt">
</i>
Logout
</a>
</li>
</ul>
</nav>
<button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div> <main class="main">
<div style="padding-top: 20px" class="container-fluid">
<div class="card">
<div class="card-header">
Show Permissions
</div>
<div class="card-body">
<div class="mb-2">
<table class="table table-bordered table-striped">
<tbody>
<tr>
<th>
ID
</th>
<td>
11
</td>
</tr>
<tr>
<th>
Title
</th>
<td>
role_access
</td>
</tr>
</tbody>
</table>
<a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions/Copy%20of%20Copy%20of%2011">
Back to list
</a>
</div>
<nav class="mb-3">
<div class="nav nav-tabs">
</div>
</nav>
<div class="tab-content">
</div>
</div>
</div>
</div>
</main>
<form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
<input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
</form>
</div>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"></script>
<script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"></script>
<script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
<script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
<script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"></script>
<script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"></script>
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"></script>
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"></script>
<script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"></script>
<script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"></script>
<script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"></script>
<script src="http://b3789e93786d.ngrok.io/js/main.js"></script>
<script>
$(function() {
let copyButtonTrans = 'Copy'
let csvButtonTrans = 'CSV'
let excelButtonTrans = 'Excel'
let pdfButtonTrans = 'PDF'
let printButtonTrans = 'Print'
let colvisButtonTrans = 'Column visibility'
let languages = {
'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
};
$.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
$.extend(true, $.fn.dataTable.defaults, {
language: {
url: languages['en']
},
columnDefs: [{
orderable: false,
className: 'select-checkbox',
targets: 0
}, {
orderable: false,
searchable: false,
targets: -1
}],
select: {
style: 'multi+shift',
selector: 'td:first-child'
},
order: [],
scrollX: true,
pageLength: 100,
dom: 'lBfrtip<"actions">',
buttons: [
{
extend: 'copy',
className: 'btn-default',
text: copyButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'csv',
className: 'btn-default',
text: csvButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'excel',
className: 'btn-default',
text: excelButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'pdf',
className: 'btn-default',
text: pdfButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'print',
className: 'btn-default',
text: printButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'colvis',
className: 'btn-default',
text: colvisButtonTrans,
exportOptions: {
columns: ':visible'
}
}
]
});
$.fn.dataTable.ext.classes.sPageButton = '';
});
</script>
</body>
</html>
Transitions describe the steps required to restore the state of the page, to the one it had when it was processed by the scanner, as a series of events. In essence, each transition represents a user interaction.
| # | Time | Event | Element | Options | ||
|---|---|---|---|---|---|---|
| 0 | 1.860287 | load |
page
|
|
||
| 1 | 1.31688 | request |
http://b3789e93786d.ngrok.io/admin/permissions |
|
||
| 2 | 1.77744 | click |
<a class="btn btn-xs btn-primary" href="http://b3789e93786d.ngrok.io/admin/permissions/11">
|
|
||
| 3 | 1.07014 | request |
http://b3789e93786d.ngrok.io/admin/permissions/11 |
|
Raw HTTP request used to retrieve the page.
GET /admin/permissions/11 HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Referer: http://b3789e93786d.ngrok.io/admin/permissions Cookie: XSRF-TOKEN=eyJpdiI6IitiaU03VENMNzRtQzZJTGtZTVBPdWc9PSIsInZhbHVlIjoiZGIzQmxpWXh5emdHbjlXeFo2YUc2bmcrT05lWDkyVTFSNFwvRit0R2tFbHhcL2ZFbFA0TzJ5RnJkelU1cFBJdiszSWJuQms3b1c5VmFNamwwcTZ6cExYUFA0ZW44RlJmMEhUTG1lU2ZcL0wyMzJaUmdqRXAwZllqT0dVQXYzUDFwbVkiLCJtYWMiOiJjMjRmOWY0ZmQ2MDZjYWVjMThhMjkyYTc3ZjA2ZGFjY2JkNzJhYjI1MGMyNWU0Y2RjYTA1NDY3N2YxMzE1OGFlIn0%3D;laravel_session=eyJpdiI6InIzaDVzcGVKSkNzTXVwQmhGWStaMmc9PSIsInZhbHVlIjoibllOV3gydHhvTXRpY3JxYmFCS1R3cVUwXC92ZGpaamVjZTJ6N0xzdXJKclQrY3V5QlJ5RGoySzJJcWtpS21jSHY5cjFVVktzV2YyRW1tVWVMQ2pENWdDQXJ1TVdhM0dCSkgrbFZETEVvYWtHNnA0Y1dNamVObHdLa1B1NXlwbnhRIiwibWFjIjoiZjI4M2U5MGZmNjIzYjAyMzUzY2YxNTI0NTRhY2Y4OGJjOGQwNTBmNDJlYWQxZjhhMWFmZmEwZmRlZWM2ZWY2OCJ9 Accept-Language: en-US,* Host: b3789e93786d.ngrok.io
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 200 OK
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:48:55 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;
/* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
<title>Appointments</title>
<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
<link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
<link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
</head>
<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
<header class="app-header navbar">
<button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
<span class="navbar-toggler-icon"></span>
</button>
<a class="navbar-brand" href="#">
<span class="navbar-brand-full">Appointments</span>
<span class="navbar-brand-minimized">Appointments</span>
</a>
<button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
<span class="navbar-toggler-icon"></span>
</button>
<ul class="nav navbar-nav ml-auto">
</ul>
</header>
<div class="app-body">
<div class="sidebar">
<nav class="sidebar-nav">
<ul class="nav">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
<i class="nav-icon fas fa-fw fa-tachometer-alt">
</i>
Dashboard
</a>
</li>
<li class="nav-item nav-dropdown">
<a class="nav-link nav-dropdown-toggle" href="#">
<i class="fa-fw fas fa-users nav-icon">
</i>
User management
</a>
<ul class="nav-dropdown-items">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
<i class="fa-fw fas fa-unlock-alt nav-icon">
</i>
Permissions
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
<i class="fa-fw fas fa-briefcase nav-icon">
</i>
Roles
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
<i class="fa-fw fas fa-user nav-icon">
</i>
Users
</a>
</li>
</ul>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Services
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Employees
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Clients
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Appointments
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
<i class="nav-icon fa-fw fas fa-calendar">
</i>
Calendar
</a>
</li>
<li class="nav-item">
<a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
<i class="nav-icon fas fa-fw fa-sign-out-alt">
</i>
Logout
</a>
</li>
</ul>
</nav>
<button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div> <main class="main">
<div style="padding-top: 20px" class="container-fluid">
<div class="card">
<div class="card-header">
Show Permissions
</div>
<div class="card-body">
<div class="mb-2">
<table class="table table-bordered table-striped">
<tbody>
<tr>
<th>
ID
</th>
<td>
11
</td>
</tr>
<tr>
<th>
Title
</th>
<td>
role_access
</td>
</tr>
</tbody>
</table>
<a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
Back to list
</a>
</div>
<nav class="mb-3">
<div class="nav nav-tabs">
</div>
</nav>
<div class="tab-content">
</div>
</div>
</div>
</div>
</main>
<form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
<input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
</form>
</div>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://b3789e93786d.ngrok.io/js/main.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
$(function() {
let copyButtonTrans = 'Copy'
let csvButtonTrans = 'CSV'
let excelButtonTrans = 'Excel'
let pdfButtonTrans = 'PDF'
let printButtonTrans = 'Print'
let colvisButtonTrans = 'Column visibility'
let languages = {
'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
};
$.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
$.extend(true, $.fn.dataTable.defaults, {
language: {
url: languages['en']
},
columnDefs: [{
orderable: false,
className: 'select-checkbox',
targets: 0
}, {
orderable: false,
searchable: false,
targets: -1
}],
select: {
style: 'multi+shift',
selector: 'td:first-child'
},
order: [],
scrollX: true,
pageLength: 100,
dom: 'lBfrtip<"actions">',
buttons: [
{
extend: 'copy',
className: 'btn-default',
text: copyButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'csv',
className: 'btn-default',
text: csvButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'excel',
className: 'btn-default',
text: excelButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'pdf',
className: 'btn-default',
text: pdfButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'print',
className: 'btn-default',
text: printButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'colvis',
className: 'btn-default',
text: colvisButtonTrans,
exportOptions: {
columns: ':visible'
}
}
]
});
$.fn.dataTable.ext.classes.sPageButton = '';
});
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
</body>
</html>
This is the browser-evaluated body, as a result of the listed transitions.
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 | <html><head><script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script> /* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */ window._arachni_js_namespace = true; /* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */ </script> <!-- Injected by Arachni::Browser::Javascript --> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> <title>Appointments</title> <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet"> <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet"> <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet"> <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet"> <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet"> </head> <body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show"> <header class="app-header navbar"> <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show"> <span class="navbar-toggler-icon"></span> </button> <a class="navbar-brand" href="#"> <span class="navbar-brand-full">Appointments</span> <span class="navbar-brand-minimized">Appointments</span> </a> <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show"> <span class="navbar-toggler-icon"></span> </button> <ul class="nav navbar-nav ml-auto"> </ul> </header> <div class="app-body"> <div class="sidebar"> <nav class="sidebar-nav"> <ul class="nav"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link" data-arachni-id="209607824"> <i class="nav-icon fas fa-fw fa-tachometer-alt"> </i> Dashboard </a> </li> <li class="nav-item nav-dropdown"> <a class="nav-link nav-dropdown-toggle" href="#"> <i class="fa-fw fas fa-users nav-icon"> </i> User management </a> <ul class="nav-dropdown-items"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active" data-arachni-id="1555521058"> <i class="fa-fw fas fa-unlock-alt nav-icon"> </i> Permissions </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link " data-arachni-id="-1170485759"> <i class="fa-fw fas fa-briefcase nav-icon"> </i> Roles </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link " data-arachni-id="-832018167"> <i class="fa-fw fas fa-user nav-icon"> </i> Users </a> </li> </ul> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link " data-arachni-id="-932905896"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Services </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link " data-arachni-id="-692569287"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Employees </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link " data-arachni-id="-2088011370"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Clients </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link " data-arachni-id="-57651262"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Appointments </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link " data-arachni-id="-2134217464"> <i class="nav-icon fa-fw fas fa-calendar"> </i> Calendar </a> </li> <li class="nav-item"> <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();" data-arachni-id="273839128"> <i class="nav-icon fas fa-fw fa-sign-out-alt"> </i> Logout </a> </li> </ul> </nav> <button class="sidebar-minimizer brand-minimizer" type="button"></button> </div> <main class="main"> <div style="padding-top: 20px" class="container-fluid"> <div class="card"> <div class="card-header"> Show Permissions </div> <div class="card-body"> <div class="mb-2"> <table class="table table-bordered table-striped"> <tbody> <tr> <th> ID </th> <td> 11 </td> </tr> <tr> <th> Title </th> <td> role_access </td> </tr> </tbody> </table> <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions"> Back to list </a> </div> <nav class="mb-3"> <div class="nav nav-tabs"> </div> </nav> <div class="tab-content"> </div> </div> </div> </div> </main> <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;"> <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> </form> </div> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://b3789e93786d.ngrok.io/js/main.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); $(function() { let copyButtonTrans = 'Copy' let csvButtonTrans = 'CSV' let excelButtonTrans = 'Excel' let pdfButtonTrans = 'PDF' let printButtonTrans = 'Print' let colvisButtonTrans = 'Column visibility' let languages = { 'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json' }; $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' }) $.extend(true, $.fn.dataTable.defaults, { language: { url: languages['en'] }, columnDefs: [{ orderable: false, className: 'select-checkbox', targets: 0 }, { orderable: false, searchable: false, targets: -1 }], select: { style: 'multi+shift', selector: 'td:first-child' }, order: [], scrollX: true, pageLength: 100, dom: 'lBfrtip<"actions">', buttons: [ { extend: 'copy', className: 'btn-default', text: copyButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'csv', className: 'btn-default', text: csvButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'excel', className: 'btn-default', text: excelButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'pdf', className: 'btn-default', text: pdfButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'print', className: 'btn-default', text: printButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'colvis', className: 'btn-default', text: colvisButtonTrans, exportOptions: { columns: ':visible' } } ] }); $.fn.dataTable.ext.classes.sPageButton = ''; }); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> </body></html> |
This is the original HTTP response body.
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 | <script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script> /* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */ window._arachni_js_namespace = true; /* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */ </script> <!-- Injected by Arachni::Browser::Javascript --> <!DOCTYPE html> <html> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> <title>Appointments</title> <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" /> <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" /> <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" /> <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" /> </head> <body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show"> <header class="app-header navbar"> <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show"> <span class="navbar-toggler-icon"></span> </button> <a class="navbar-brand" href="#"> <span class="navbar-brand-full">Appointments</span> <span class="navbar-brand-minimized">Appointments</span> </a> <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show"> <span class="navbar-toggler-icon"></span> </button> <ul class="nav navbar-nav ml-auto"> </ul> </header> <div class="app-body"> <div class="sidebar"> <nav class="sidebar-nav"> <ul class="nav"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link"> <i class="nav-icon fas fa-fw fa-tachometer-alt"> </i> Dashboard </a> </li> <li class="nav-item nav-dropdown"> <a class="nav-link nav-dropdown-toggle" href="#"> <i class="fa-fw fas fa-users nav-icon"> </i> User management </a> <ul class="nav-dropdown-items"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active"> <i class="fa-fw fas fa-unlock-alt nav-icon"> </i> Permissions </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link "> <i class="fa-fw fas fa-briefcase nav-icon"> </i> Roles </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link "> <i class="fa-fw fas fa-user nav-icon"> </i> Users </a> </li> </ul> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Services </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Employees </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Clients </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Appointments </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link "> <i class="nav-icon fa-fw fas fa-calendar"> </i> Calendar </a> </li> <li class="nav-item"> <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();"> <i class="nav-icon fas fa-fw fa-sign-out-alt"> </i> Logout </a> </li> </ul> </nav> <button class="sidebar-minimizer brand-minimizer" type="button"></button> </div> <main class="main"> <div style="padding-top: 20px" class="container-fluid"> <div class="card"> <div class="card-header"> Show Permissions </div> <div class="card-body"> <div class="mb-2"> <table class="table table-bordered table-striped"> <tbody> <tr> <th> ID </th> <td> 11 </td> </tr> <tr> <th> Title </th> <td> role_access </td> </tr> </tbody> </table> <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions"> Back to list </a> </div> <nav class="mb-3"> <div class="nav nav-tabs"> </div> </nav> <div class="tab-content"> </div> </div> </div> </div> </main> <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;"> <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> </form> </div> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://b3789e93786d.ngrok.io/js/main.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); $(function() { let copyButtonTrans = 'Copy' let csvButtonTrans = 'CSV' let excelButtonTrans = 'Excel' let pdfButtonTrans = 'PDF' let printButtonTrans = 'Print' let colvisButtonTrans = 'Column visibility' let languages = { 'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json' }; $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' }) $.extend(true, $.fn.dataTable.defaults, { language: { url: languages['en'] }, columnDefs: [{ orderable: false, className: 'select-checkbox', targets: 0 }, { orderable: false, searchable: false, targets: -1 }], select: { style: 'multi+shift', selector: 'td:first-child' }, order: [], scrollX: true, pageLength: 100, dom: 'lBfrtip<"actions">', buttons: [ { extend: 'copy', className: 'btn-default', text: copyButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'csv', className: 'btn-default', text: csvButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'excel', className: 'btn-default', text: excelButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'pdf', className: 'btn-default', text: pdfButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'print', className: 'btn-default', text: printButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'colvis', className: 'btn-default', text: colvisButtonTrans, exportOptions: { columns: ':visible' } } ] }); $.fn.dataTable.ext.classes.sPageButton = ''; }); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> </body> </html> |
server
using
GET
at
http://b3789e93786d.ngrok.io/admin/permissions/11%20-%20Copy%20(2)/
pointing to
http://b3789e93786d.ngrok.io/admin/permissions/11%20-%20Copy%20(2)/
.
System components have attached some insights to this issue.
| Proof |
|---|
HTTP/1.1 200 OK |
Raw HTTP request used to retrieve the page.
GET /admin/permissions/11%20-%20Copy%20(2)/ HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D;laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 200 OK
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:56:31 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6Ik1WZUE3WXdxUlwvajJpZm1YSGc4MHpBPT0iLCJ2YWx1ZSI6IjRjd3doakRvVVBQYmxwMFJmXC9VcUR2VXVmQ1FWNkVwVFJOb0FzYzJ5d3hcL2ROd216ZnJGek1telpHWXN6XC9lM25hQTY1M3BCdTVpVnhPRmtHQlU1Q3FBYmF4VjZxQTBIMU1YRDJ0OVhMTmFkNVhia0NnZGVzRWhEZ1ZDZzJrb2pEIiwibWFjIjoiMTUyZDRhZTc4M2FiZDJhMTBiZWU1YzdiMWU1N2YxYjE1ZWU0NmU1NDBkZmEzOWIzMzBiMjViYjE4NmY3YzNhZiJ9; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6IlVIYlhQdXVPUFBPaDJXZE9YdTk2a2c9PSIsInZhbHVlIjoicllRWDROdG1rSE0zNDU1UDVndFV2YTloXC9rMnM1TXhpVGpkb2xvRkQrVU1BMWsxRmM5dmNielwvQVJFNXJXZW1BYTNNUlgwSWhWZ1U0VWpEdHJDVGF5ekltcVZTVVQ2d0hxdGdKSTZldmNUcExDNWwzTGYzYzZjMU5sYjVFWEFKSiIsIm1hYyI6ImUxNmY5MjNkOTVjYzA3NjlkMDE5ZGQzZTNkM2JhZTg0ZTY4ZDVjNGM5NWFmZGE0ZjY0MGU0ODY2MjAwOTlmODMifQ%3D%3D; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
<title>Appointments</title>
<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
<link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
<link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
</head>
<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
<header class="app-header navbar">
<button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
<span class="navbar-toggler-icon"></span>
</button>
<a class="navbar-brand" href="#">
<span class="navbar-brand-full">Appointments</span>
<span class="navbar-brand-minimized">Appointments</span>
</a>
<button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
<span class="navbar-toggler-icon"></span>
</button>
<ul class="nav navbar-nav ml-auto">
</ul>
</header>
<div class="app-body">
<div class="sidebar">
<nav class="sidebar-nav">
<ul class="nav">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
<i class="nav-icon fas fa-fw fa-tachometer-alt">
</i>
Dashboard
</a>
</li>
<li class="nav-item nav-dropdown">
<a class="nav-link nav-dropdown-toggle" href="#">
<i class="fa-fw fas fa-users nav-icon">
</i>
User management
</a>
<ul class="nav-dropdown-items">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
<i class="fa-fw fas fa-unlock-alt nav-icon">
</i>
Permissions
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
<i class="fa-fw fas fa-briefcase nav-icon">
</i>
Roles
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
<i class="fa-fw fas fa-user nav-icon">
</i>
Users
</a>
</li>
</ul>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Services
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Employees
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Clients
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Appointments
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
<i class="nav-icon fa-fw fas fa-calendar">
</i>
Calendar
</a>
</li>
<li class="nav-item">
<a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
<i class="nav-icon fas fa-fw fa-sign-out-alt">
</i>
Logout
</a>
</li>
</ul>
</nav>
<button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div> <main class="main">
<div style="padding-top: 20px" class="container-fluid">
<div class="card">
<div class="card-header">
Show Permissions
</div>
<div class="card-body">
<div class="mb-2">
<table class="table table-bordered table-striped">
<tbody>
<tr>
<th>
ID
</th>
<td>
11
</td>
</tr>
<tr>
<th>
Title
</th>
<td>
role_access
</td>
</tr>
</tbody>
</table>
<a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions/11~">
Back to list
</a>
</div>
<nav class="mb-3">
<div class="nav nav-tabs">
</div>
</nav>
<div class="tab-content">
</div>
</div>
</div>
</div>
</main>
<form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
<input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
</form>
</div>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"></script>
<script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"></script>
<script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
<script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
<script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"></script>
<script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"></script>
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"></script>
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"></script>
<script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"></script>
<script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"></script>
<script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"></script>
<script src="http://b3789e93786d.ngrok.io/js/main.js"></script>
<script>
$(function() {
let copyButtonTrans = 'Copy'
let csvButtonTrans = 'CSV'
let excelButtonTrans = 'Excel'
let pdfButtonTrans = 'PDF'
let printButtonTrans = 'Print'
let colvisButtonTrans = 'Column visibility'
let languages = {
'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
};
$.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
$.extend(true, $.fn.dataTable.defaults, {
language: {
url: languages['en']
},
columnDefs: [{
orderable: false,
className: 'select-checkbox',
targets: 0
}, {
orderable: false,
searchable: false,
targets: -1
}],
select: {
style: 'multi+shift',
selector: 'td:first-child'
},
order: [],
scrollX: true,
pageLength: 100,
dom: 'lBfrtip<"actions">',
buttons: [
{
extend: 'copy',
className: 'btn-default',
text: copyButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'csv',
className: 'btn-default',
text: csvButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'excel',
className: 'btn-default',
text: excelButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'pdf',
className: 'btn-default',
text: pdfButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'print',
className: 'btn-default',
text: printButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'colvis',
className: 'btn-default',
text: colvisButtonTrans,
exportOptions: {
columns: ':visible'
}
}
]
});
$.fn.dataTable.ext.classes.sPageButton = '';
});
</script>
</body>
</html>
Transitions describe the steps required to restore the state of the page, to the one it had when it was processed by the scanner, as a series of events. In essence, each transition represents a user interaction.
| # | Time | Event | Element | Options | ||
|---|---|---|---|---|---|---|
| 0 | 1.860287 | load |
page
|
|
||
| 1 | 1.31688 | request |
http://b3789e93786d.ngrok.io/admin/permissions |
|
||
| 2 | 1.77744 | click |
<a class="btn btn-xs btn-primary" href="http://b3789e93786d.ngrok.io/admin/permissions/11">
|
|
||
| 3 | 1.07014 | request |
http://b3789e93786d.ngrok.io/admin/permissions/11 |
|
Raw HTTP request used to retrieve the page.
GET /admin/permissions/11 HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Referer: http://b3789e93786d.ngrok.io/admin/permissions Cookie: XSRF-TOKEN=eyJpdiI6IitiaU03VENMNzRtQzZJTGtZTVBPdWc9PSIsInZhbHVlIjoiZGIzQmxpWXh5emdHbjlXeFo2YUc2bmcrT05lWDkyVTFSNFwvRit0R2tFbHhcL2ZFbFA0TzJ5RnJkelU1cFBJdiszSWJuQms3b1c5VmFNamwwcTZ6cExYUFA0ZW44RlJmMEhUTG1lU2ZcL0wyMzJaUmdqRXAwZllqT0dVQXYzUDFwbVkiLCJtYWMiOiJjMjRmOWY0ZmQ2MDZjYWVjMThhMjkyYTc3ZjA2ZGFjY2JkNzJhYjI1MGMyNWU0Y2RjYTA1NDY3N2YxMzE1OGFlIn0%3D;laravel_session=eyJpdiI6InIzaDVzcGVKSkNzTXVwQmhGWStaMmc9PSIsInZhbHVlIjoibllOV3gydHhvTXRpY3JxYmFCS1R3cVUwXC92ZGpaamVjZTJ6N0xzdXJKclQrY3V5QlJ5RGoySzJJcWtpS21jSHY5cjFVVktzV2YyRW1tVWVMQ2pENWdDQXJ1TVdhM0dCSkgrbFZETEVvYWtHNnA0Y1dNamVObHdLa1B1NXlwbnhRIiwibWFjIjoiZjI4M2U5MGZmNjIzYjAyMzUzY2YxNTI0NTRhY2Y4OGJjOGQwNTBmNDJlYWQxZjhhMWFmZmEwZmRlZWM2ZWY2OCJ9 Accept-Language: en-US,* Host: b3789e93786d.ngrok.io
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 200 OK
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:48:55 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;
/* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
<title>Appointments</title>
<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
<link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
<link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
</head>
<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
<header class="app-header navbar">
<button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
<span class="navbar-toggler-icon"></span>
</button>
<a class="navbar-brand" href="#">
<span class="navbar-brand-full">Appointments</span>
<span class="navbar-brand-minimized">Appointments</span>
</a>
<button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
<span class="navbar-toggler-icon"></span>
</button>
<ul class="nav navbar-nav ml-auto">
</ul>
</header>
<div class="app-body">
<div class="sidebar">
<nav class="sidebar-nav">
<ul class="nav">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
<i class="nav-icon fas fa-fw fa-tachometer-alt">
</i>
Dashboard
</a>
</li>
<li class="nav-item nav-dropdown">
<a class="nav-link nav-dropdown-toggle" href="#">
<i class="fa-fw fas fa-users nav-icon">
</i>
User management
</a>
<ul class="nav-dropdown-items">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
<i class="fa-fw fas fa-unlock-alt nav-icon">
</i>
Permissions
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
<i class="fa-fw fas fa-briefcase nav-icon">
</i>
Roles
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
<i class="fa-fw fas fa-user nav-icon">
</i>
Users
</a>
</li>
</ul>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Services
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Employees
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Clients
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Appointments
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
<i class="nav-icon fa-fw fas fa-calendar">
</i>
Calendar
</a>
</li>
<li class="nav-item">
<a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
<i class="nav-icon fas fa-fw fa-sign-out-alt">
</i>
Logout
</a>
</li>
</ul>
</nav>
<button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div> <main class="main">
<div style="padding-top: 20px" class="container-fluid">
<div class="card">
<div class="card-header">
Show Permissions
</div>
<div class="card-body">
<div class="mb-2">
<table class="table table-bordered table-striped">
<tbody>
<tr>
<th>
ID
</th>
<td>
11
</td>
</tr>
<tr>
<th>
Title
</th>
<td>
role_access
</td>
</tr>
</tbody>
</table>
<a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
Back to list
</a>
</div>
<nav class="mb-3">
<div class="nav nav-tabs">
</div>
</nav>
<div class="tab-content">
</div>
</div>
</div>
</div>
</main>
<form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
<input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
</form>
</div>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://b3789e93786d.ngrok.io/js/main.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
$(function() {
let copyButtonTrans = 'Copy'
let csvButtonTrans = 'CSV'
let excelButtonTrans = 'Excel'
let pdfButtonTrans = 'PDF'
let printButtonTrans = 'Print'
let colvisButtonTrans = 'Column visibility'
let languages = {
'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
};
$.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
$.extend(true, $.fn.dataTable.defaults, {
language: {
url: languages['en']
},
columnDefs: [{
orderable: false,
className: 'select-checkbox',
targets: 0
}, {
orderable: false,
searchable: false,
targets: -1
}],
select: {
style: 'multi+shift',
selector: 'td:first-child'
},
order: [],
scrollX: true,
pageLength: 100,
dom: 'lBfrtip<"actions">',
buttons: [
{
extend: 'copy',
className: 'btn-default',
text: copyButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'csv',
className: 'btn-default',
text: csvButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'excel',
className: 'btn-default',
text: excelButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'pdf',
className: 'btn-default',
text: pdfButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'print',
className: 'btn-default',
text: printButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'colvis',
className: 'btn-default',
text: colvisButtonTrans,
exportOptions: {
columns: ':visible'
}
}
]
});
$.fn.dataTable.ext.classes.sPageButton = '';
});
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
</body>
</html>
This is the browser-evaluated body, as a result of the listed transitions.
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 | <html><head><script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script> /* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */ window._arachni_js_namespace = true; /* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */ </script> <!-- Injected by Arachni::Browser::Javascript --> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> <title>Appointments</title> <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet"> <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet"> <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet"> <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet"> <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet"> </head> <body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show"> <header class="app-header navbar"> <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show"> <span class="navbar-toggler-icon"></span> </button> <a class="navbar-brand" href="#"> <span class="navbar-brand-full">Appointments</span> <span class="navbar-brand-minimized">Appointments</span> </a> <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show"> <span class="navbar-toggler-icon"></span> </button> <ul class="nav navbar-nav ml-auto"> </ul> </header> <div class="app-body"> <div class="sidebar"> <nav class="sidebar-nav"> <ul class="nav"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link" data-arachni-id="209607824"> <i class="nav-icon fas fa-fw fa-tachometer-alt"> </i> Dashboard </a> </li> <li class="nav-item nav-dropdown"> <a class="nav-link nav-dropdown-toggle" href="#"> <i class="fa-fw fas fa-users nav-icon"> </i> User management </a> <ul class="nav-dropdown-items"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active" data-arachni-id="1555521058"> <i class="fa-fw fas fa-unlock-alt nav-icon"> </i> Permissions </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link " data-arachni-id="-1170485759"> <i class="fa-fw fas fa-briefcase nav-icon"> </i> Roles </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link " data-arachni-id="-832018167"> <i class="fa-fw fas fa-user nav-icon"> </i> Users </a> </li> </ul> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link " data-arachni-id="-932905896"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Services </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link " data-arachni-id="-692569287"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Employees </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link " data-arachni-id="-2088011370"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Clients </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link " data-arachni-id="-57651262"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Appointments </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link " data-arachni-id="-2134217464"> <i class="nav-icon fa-fw fas fa-calendar"> </i> Calendar </a> </li> <li class="nav-item"> <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();" data-arachni-id="273839128"> <i class="nav-icon fas fa-fw fa-sign-out-alt"> </i> Logout </a> </li> </ul> </nav> <button class="sidebar-minimizer brand-minimizer" type="button"></button> </div> <main class="main"> <div style="padding-top: 20px" class="container-fluid"> <div class="card"> <div class="card-header"> Show Permissions </div> <div class="card-body"> <div class="mb-2"> <table class="table table-bordered table-striped"> <tbody> <tr> <th> ID </th> <td> 11 </td> </tr> <tr> <th> Title </th> <td> role_access </td> </tr> </tbody> </table> <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions"> Back to list </a> </div> <nav class="mb-3"> <div class="nav nav-tabs"> </div> </nav> <div class="tab-content"> </div> </div> </div> </div> </main> <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;"> <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> </form> </div> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://b3789e93786d.ngrok.io/js/main.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); $(function() { let copyButtonTrans = 'Copy' let csvButtonTrans = 'CSV' let excelButtonTrans = 'Excel' let pdfButtonTrans = 'PDF' let printButtonTrans = 'Print' let colvisButtonTrans = 'Column visibility' let languages = { 'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json' }; $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' }) $.extend(true, $.fn.dataTable.defaults, { language: { url: languages['en'] }, columnDefs: [{ orderable: false, className: 'select-checkbox', targets: 0 }, { orderable: false, searchable: false, targets: -1 }], select: { style: 'multi+shift', selector: 'td:first-child' }, order: [], scrollX: true, pageLength: 100, dom: 'lBfrtip<"actions">', buttons: [ { extend: 'copy', className: 'btn-default', text: copyButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'csv', className: 'btn-default', text: csvButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'excel', className: 'btn-default', text: excelButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'pdf', className: 'btn-default', text: pdfButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'print', className: 'btn-default', text: printButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'colvis', className: 'btn-default', text: colvisButtonTrans, exportOptions: { columns: ':visible' } } ] }); $.fn.dataTable.ext.classes.sPageButton = ''; }); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> </body></html> |
This is the original HTTP response body.
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 | <script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script> /* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */ window._arachni_js_namespace = true; /* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */ </script> <!-- Injected by Arachni::Browser::Javascript --> <!DOCTYPE html> <html> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> <title>Appointments</title> <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" /> <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" /> <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" /> <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" /> </head> <body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show"> <header class="app-header navbar"> <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show"> <span class="navbar-toggler-icon"></span> </button> <a class="navbar-brand" href="#"> <span class="navbar-brand-full">Appointments</span> <span class="navbar-brand-minimized">Appointments</span> </a> <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show"> <span class="navbar-toggler-icon"></span> </button> <ul class="nav navbar-nav ml-auto"> </ul> </header> <div class="app-body"> <div class="sidebar"> <nav class="sidebar-nav"> <ul class="nav"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link"> <i class="nav-icon fas fa-fw fa-tachometer-alt"> </i> Dashboard </a> </li> <li class="nav-item nav-dropdown"> <a class="nav-link nav-dropdown-toggle" href="#"> <i class="fa-fw fas fa-users nav-icon"> </i> User management </a> <ul class="nav-dropdown-items"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active"> <i class="fa-fw fas fa-unlock-alt nav-icon"> </i> Permissions </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link "> <i class="fa-fw fas fa-briefcase nav-icon"> </i> Roles </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link "> <i class="fa-fw fas fa-user nav-icon"> </i> Users </a> </li> </ul> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Services </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Employees </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Clients </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Appointments </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link "> <i class="nav-icon fa-fw fas fa-calendar"> </i> Calendar </a> </li> <li class="nav-item"> <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();"> <i class="nav-icon fas fa-fw fa-sign-out-alt"> </i> Logout </a> </li> </ul> </nav> <button class="sidebar-minimizer brand-minimizer" type="button"></button> </div> <main class="main"> <div style="padding-top: 20px" class="container-fluid"> <div class="card"> <div class="card-header"> Show Permissions </div> <div class="card-body"> <div class="mb-2"> <table class="table table-bordered table-striped"> <tbody> <tr> <th> ID </th> <td> 11 </td> </tr> <tr> <th> Title </th> <td> role_access </td> </tr> </tbody> </table> <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions"> Back to list </a> </div> <nav class="mb-3"> <div class="nav nav-tabs"> </div> </nav> <div class="tab-content"> </div> </div> </div> </div> </main> <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;"> <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> </form> </div> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://b3789e93786d.ngrok.io/js/main.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); $(function() { let copyButtonTrans = 'Copy' let csvButtonTrans = 'CSV' let excelButtonTrans = 'Excel' let pdfButtonTrans = 'PDF' let printButtonTrans = 'Print' let colvisButtonTrans = 'Column visibility' let languages = { 'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json' }; $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' }) $.extend(true, $.fn.dataTable.defaults, { language: { url: languages['en'] }, columnDefs: [{ orderable: false, className: 'select-checkbox', targets: 0 }, { orderable: false, searchable: false, targets: -1 }], select: { style: 'multi+shift', selector: 'td:first-child' }, order: [], scrollX: true, pageLength: 100, dom: 'lBfrtip<"actions">', buttons: [ { extend: 'copy', className: 'btn-default', text: copyButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'csv', className: 'btn-default', text: csvButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'excel', className: 'btn-default', text: excelButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'pdf', className: 'btn-default', text: pdfButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'print', className: 'btn-default', text: printButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'colvis', className: 'btn-default', text: colvisButtonTrans, exportOptions: { columns: ':visible' } } ] }); $.fn.dataTable.ext.classes.sPageButton = ''; }); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> </body> </html> |
server
using
GET
at
http://b3789e93786d.ngrok.io/admin/permissions/11~/
pointing to
http://b3789e93786d.ngrok.io/admin/permissions/11~/
.
System components have attached some insights to this issue.
| Proof |
|---|
HTTP/1.1 200 OK |
Raw HTTP request used to retrieve the page.
GET /admin/permissions/11~/ HTTP/1.1 Host: b3789e93786d.ngrok.io Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.8,he;q=0.6 X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D;laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 200 OK
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:56:31 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjhBVnJMM3V4MnV6YmNOSGMzeUVJcHc9PSIsInZhbHVlIjoia1lcL3JEdGRJVFo0eHB4QVVzRkRjdkNOS0U4V0E2eFRPeDVVVVh5MGtrVXRVWVlpM05Ya1pjTEl3UEd0a3BzcFhsVjAwR0dyU0xZTDFGY0xxTEZyXC9jUkZKN0xaNGdhdyt1MUt2dmpzVEdiM2p1TDZZXC94K3RDb0J3XC9UeVhjT2RQIiwibWFjIjoiODM1Y2NmZmZjNGY1ZDkwZjA4NWZkOTZjNmNjODhhYmZmZWYxZDVhMmQ3ZDE2MGUxMmRlMTczMzIxYjNlODU1OSJ9; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6Imxuc000S0VYRGx3K0oxb0VFdjdjcUE9PSIsInZhbHVlIjoiSXJibkhUcUZZRWVjVmdHcWY3TTM4TEN1TzkxZm5QK2FyVjVOWSt6NUQyU0hBXC9UYmFpMzNpOXRUUmZ2TmhcL1p0Q3pmTEoyazBYVEMwU3ZzTlZLclI3TUtYOFQ5UUlFRzVhQ2FnNUdZMllaSDdtdW5KcjBGZVwvdjUybTFaNnNHSjAiLCJtYWMiOiJlZjI3YzBkOGQzNTI2Nzg4M2ZiMzFiNzI3YTQ0MDdmNmRmYmU1YTk4ZTc4MmExMTc1ZjY4NGM1YjI4OWVmN2YxIn0%3D; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
<title>Appointments</title>
<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
<link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
<link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
</head>
<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
<header class="app-header navbar">
<button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
<span class="navbar-toggler-icon"></span>
</button>
<a class="navbar-brand" href="#">
<span class="navbar-brand-full">Appointments</span>
<span class="navbar-brand-minimized">Appointments</span>
</a>
<button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
<span class="navbar-toggler-icon"></span>
</button>
<ul class="nav navbar-nav ml-auto">
</ul>
</header>
<div class="app-body">
<div class="sidebar">
<nav class="sidebar-nav">
<ul class="nav">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
<i class="nav-icon fas fa-fw fa-tachometer-alt">
</i>
Dashboard
</a>
</li>
<li class="nav-item nav-dropdown">
<a class="nav-link nav-dropdown-toggle" href="#">
<i class="fa-fw fas fa-users nav-icon">
</i>
User management
</a>
<ul class="nav-dropdown-items">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
<i class="fa-fw fas fa-unlock-alt nav-icon">
</i>
Permissions
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
<i class="fa-fw fas fa-briefcase nav-icon">
</i>
Roles
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
<i class="fa-fw fas fa-user nav-icon">
</i>
Users
</a>
</li>
</ul>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Services
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Employees
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Clients
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Appointments
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
<i class="nav-icon fa-fw fas fa-calendar">
</i>
Calendar
</a>
</li>
<li class="nav-item">
<a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
<i class="nav-icon fas fa-fw fa-sign-out-alt">
</i>
Logout
</a>
</li>
</ul>
</nav>
<button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div> <main class="main">
<div style="padding-top: 20px" class="container-fluid">
<div class="card">
<div class="card-header">
Show Permissions
</div>
<div class="card-body">
<div class="mb-2">
<table class="table table-bordered table-striped">
<tbody>
<tr>
<th>
ID
</th>
<td>
11
</td>
</tr>
<tr>
<th>
Title
</th>
<td>
role_access
</td>
</tr>
</tbody>
</table>
<a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions/11%20(third%20copy)">
Back to list
</a>
</div>
<nav class="mb-3">
<div class="nav nav-tabs">
</div>
</nav>
<div class="tab-content">
</div>
</div>
</div>
</div>
</main>
<form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
<input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
</form>
</div>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"></script>
<script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"></script>
<script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
<script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
<script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"></script>
<script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"></script>
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"></script>
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"></script>
<script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"></script>
<script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"></script>
<script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"></script>
<script src="http://b3789e93786d.ngrok.io/js/main.js"></script>
<script>
$(function() {
let copyButtonTrans = 'Copy'
let csvButtonTrans = 'CSV'
let excelButtonTrans = 'Excel'
let pdfButtonTrans = 'PDF'
let printButtonTrans = 'Print'
let colvisButtonTrans = 'Column visibility'
let languages = {
'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
};
$.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
$.extend(true, $.fn.dataTable.defaults, {
language: {
url: languages['en']
},
columnDefs: [{
orderable: false,
className: 'select-checkbox',
targets: 0
}, {
orderable: false,
searchable: false,
targets: -1
}],
select: {
style: 'multi+shift',
selector: 'td:first-child'
},
order: [],
scrollX: true,
pageLength: 100,
dom: 'lBfrtip<"actions">',
buttons: [
{
extend: 'copy',
className: 'btn-default',
text: copyButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'csv',
className: 'btn-default',
text: csvButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'excel',
className: 'btn-default',
text: excelButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'pdf',
className: 'btn-default',
text: pdfButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'print',
className: 'btn-default',
text: printButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'colvis',
className: 'btn-default',
text: colvisButtonTrans,
exportOptions: {
columns: ':visible'
}
}
]
});
$.fn.dataTable.ext.classes.sPageButton = '';
});
</script>
</body>
</html>
Transitions describe the steps required to restore the state of the page, to the one it had when it was processed by the scanner, as a series of events. In essence, each transition represents a user interaction.
| # | Time | Event | Element | Options | ||
|---|---|---|---|---|---|---|
| 0 | 1.860287 | load |
page
|
|
||
| 1 | 1.31688 | request |
http://b3789e93786d.ngrok.io/admin/permissions |
|
||
| 2 | 1.77744 | click |
<a class="btn btn-xs btn-primary" href="http://b3789e93786d.ngrok.io/admin/permissions/11">
|
|
||
| 3 | 1.07014 | request |
http://b3789e93786d.ngrok.io/admin/permissions/11 |
|
Raw HTTP request used to retrieve the page.
GET /admin/permissions/11 HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: Arachni/v2.0dev Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Referer: http://b3789e93786d.ngrok.io/admin/permissions Cookie: XSRF-TOKEN=eyJpdiI6IitiaU03VENMNzRtQzZJTGtZTVBPdWc9PSIsInZhbHVlIjoiZGIzQmxpWXh5emdHbjlXeFo2YUc2bmcrT05lWDkyVTFSNFwvRit0R2tFbHhcL2ZFbFA0TzJ5RnJkelU1cFBJdiszSWJuQms3b1c5VmFNamwwcTZ6cExYUFA0ZW44RlJmMEhUTG1lU2ZcL0wyMzJaUmdqRXAwZllqT0dVQXYzUDFwbVkiLCJtYWMiOiJjMjRmOWY0ZmQ2MDZjYWVjMThhMjkyYTc3ZjA2ZGFjY2JkNzJhYjI1MGMyNWU0Y2RjYTA1NDY3N2YxMzE1OGFlIn0%3D;laravel_session=eyJpdiI6InIzaDVzcGVKSkNzTXVwQmhGWStaMmc9PSIsInZhbHVlIjoibllOV3gydHhvTXRpY3JxYmFCS1R3cVUwXC92ZGpaamVjZTJ6N0xzdXJKclQrY3V5QlJ5RGoySzJJcWtpS21jSHY5cjFVVktzV2YyRW1tVWVMQ2pENWdDQXJ1TVdhM0dCSkgrbFZETEVvYWtHNnA0Y1dNamVObHdLa1B1NXlwbnhRIiwibWFjIjoiZjI4M2U5MGZmNjIzYjAyMzUzY2YxNTI0NTRhY2Y4OGJjOGQwNTBmNDJlYWQxZjhhMWFmZmEwZmRlZWM2ZWY2OCJ9 Accept-Language: en-US,* Host: b3789e93786d.ngrok.io
Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)
HTTP/1.1 200 OK
Server: nginx/1.15.8
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Date: Mon, 02 Nov 2020 12:48:55 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;
/* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
<title>Appointments</title>
<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
<link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
<link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
<link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
<link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
</head>
<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
<header class="app-header navbar">
<button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
<span class="navbar-toggler-icon"></span>
</button>
<a class="navbar-brand" href="#">
<span class="navbar-brand-full">Appointments</span>
<span class="navbar-brand-minimized">Appointments</span>
</a>
<button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
<span class="navbar-toggler-icon"></span>
</button>
<ul class="nav navbar-nav ml-auto">
</ul>
</header>
<div class="app-body">
<div class="sidebar">
<nav class="sidebar-nav">
<ul class="nav">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
<i class="nav-icon fas fa-fw fa-tachometer-alt">
</i>
Dashboard
</a>
</li>
<li class="nav-item nav-dropdown">
<a class="nav-link nav-dropdown-toggle" href="#">
<i class="fa-fw fas fa-users nav-icon">
</i>
User management
</a>
<ul class="nav-dropdown-items">
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
<i class="fa-fw fas fa-unlock-alt nav-icon">
</i>
Permissions
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
<i class="fa-fw fas fa-briefcase nav-icon">
</i>
Roles
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
<i class="fa-fw fas fa-user nav-icon">
</i>
Users
</a>
</li>
</ul>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Services
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Employees
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Clients
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
<i class="fa-fw fas fa-cogs nav-icon">
</i>
Appointments
</a>
</li>
<li class="nav-item">
<a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
<i class="nav-icon fa-fw fas fa-calendar">
</i>
Calendar
</a>
</li>
<li class="nav-item">
<a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
<i class="nav-icon fas fa-fw fa-sign-out-alt">
</i>
Logout
</a>
</li>
</ul>
</nav>
<button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div> <main class="main">
<div style="padding-top: 20px" class="container-fluid">
<div class="card">
<div class="card-header">
Show Permissions
</div>
<div class="card-body">
<div class="mb-2">
<table class="table table-bordered table-striped">
<tbody>
<tr>
<th>
ID
</th>
<td>
11
</td>
</tr>
<tr>
<th>
Title
</th>
<td>
role_access
</td>
</tr>
</tbody>
</table>
<a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
Back to list
</a>
</div>
<nav class="mb-3">
<div class="nav nav-tabs">
</div>
</nav>
<div class="tab-content">
</div>
</div>
</div>
</div>
</main>
<form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
<input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
</form>
</div>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://b3789e93786d.ngrok.io/js/main.js">
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
// Injected by Arachni::Browser::Javascript
_arachni_js_namespaceTaintTracer.update_tracers();
_arachni_js_namespaceDOMMonitor.update_trackers();
$(function() {
let copyButtonTrans = 'Copy'
let csvButtonTrans = 'CSV'
let excelButtonTrans = 'Excel'
let pdfButtonTrans = 'PDF'
let printButtonTrans = 'Print'
let colvisButtonTrans = 'Column visibility'
let languages = {
'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
};
$.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
$.extend(true, $.fn.dataTable.defaults, {
language: {
url: languages['en']
},
columnDefs: [{
orderable: false,
className: 'select-checkbox',
targets: 0
}, {
orderable: false,
searchable: false,
targets: -1
}],
select: {
style: 'multi+shift',
selector: 'td:first-child'
},
order: [],
scrollX: true,
pageLength: 100,
dom: 'lBfrtip<"actions">',
buttons: [
{
extend: 'copy',
className: 'btn-default',
text: copyButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'csv',
className: 'btn-default',
text: csvButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'excel',
className: 'btn-default',
text: excelButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'pdf',
className: 'btn-default',
text: pdfButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'print',
className: 'btn-default',
text: printButtonTrans,
exportOptions: {
columns: ':visible'
}
},
{
extend: 'colvis',
className: 'btn-default',
text: colvisButtonTrans,
exportOptions: {
columns: ':visible'
}
}
]
});
$.fn.dataTable.ext.classes.sPageButton = '';
});
</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->
</body>
</html>
This is the browser-evaluated body, as a result of the listed transitions.
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 | <html><head><script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script> /* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */ window._arachni_js_namespace = true; /* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */ </script> <!-- Injected by Arachni::Browser::Javascript --> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> <title>Appointments</title> <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet"> <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet"> <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet"> <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet"> <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet"> <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet"> <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet"> </head> <body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show"> <header class="app-header navbar"> <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show"> <span class="navbar-toggler-icon"></span> </button> <a class="navbar-brand" href="#"> <span class="navbar-brand-full">Appointments</span> <span class="navbar-brand-minimized">Appointments</span> </a> <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show"> <span class="navbar-toggler-icon"></span> </button> <ul class="nav navbar-nav ml-auto"> </ul> </header> <div class="app-body"> <div class="sidebar"> <nav class="sidebar-nav"> <ul class="nav"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link" data-arachni-id="209607824"> <i class="nav-icon fas fa-fw fa-tachometer-alt"> </i> Dashboard </a> </li> <li class="nav-item nav-dropdown"> <a class="nav-link nav-dropdown-toggle" href="#"> <i class="fa-fw fas fa-users nav-icon"> </i> User management </a> <ul class="nav-dropdown-items"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active" data-arachni-id="1555521058"> <i class="fa-fw fas fa-unlock-alt nav-icon"> </i> Permissions </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link " data-arachni-id="-1170485759"> <i class="fa-fw fas fa-briefcase nav-icon"> </i> Roles </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link " data-arachni-id="-832018167"> <i class="fa-fw fas fa-user nav-icon"> </i> Users </a> </li> </ul> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link " data-arachni-id="-932905896"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Services </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link " data-arachni-id="-692569287"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Employees </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link " data-arachni-id="-2088011370"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Clients </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link " data-arachni-id="-57651262"> <i class="fa-fw fas fa-cogs nav-icon"> </i> Appointments </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link " data-arachni-id="-2134217464"> <i class="nav-icon fa-fw fas fa-calendar"> </i> Calendar </a> </li> <li class="nav-item"> <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();" data-arachni-id="273839128"> <i class="nav-icon fas fa-fw fa-sign-out-alt"> </i> Logout </a> </li> </ul> </nav> <button class="sidebar-minimizer brand-minimizer" type="button"></button> </div> <main class="main"> <div style="padding-top: 20px" class="container-fluid"> <div class="card"> <div class="card-header"> Show Permissions </div> <div class="card-body"> <div class="mb-2"> <table class="table table-bordered table-striped"> <tbody> <tr> <th> ID </th> <td> 11 </td> </tr> <tr> <th> Title </th> <td> role_access </td> </tr> </tbody> </table> <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions"> Back to list </a> </div> <nav class="mb-3"> <div class="nav nav-tabs"> </div> </nav> <div class="tab-content"> </div> </div> </div> </div> </main> <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;"> <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> </form> </div> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://b3789e93786d.ngrok.io/js/main.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); $(function() { let copyButtonTrans = 'Copy' let csvButtonTrans = 'CSV' let excelButtonTrans = 'Excel' let pdfButtonTrans = 'PDF' let printButtonTrans = 'Print' let colvisButtonTrans = 'Column visibility' let languages = { 'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json' }; $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' }) $.extend(true, $.fn.dataTable.defaults, { language: { url: languages['en'] }, columnDefs: [{ orderable: false, className: 'select-checkbox', targets: 0 }, { orderable: false, searchable: false, targets: -1 }], select: { style: 'multi+shift', selector: 'td:first-child' }, order: [], scrollX: true, pageLength: 100, dom: 'lBfrtip<"actions">', buttons: [ { extend: 'copy', className: 'btn-default', text: copyButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'csv', className: 'btn-default', text: csvButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'excel', className: 'btn-default', text: excelButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'pdf', className: 'btn-default', text: pdfButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'print', className: 'btn-default', text: printButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'colvis', className: 'btn-default', text: colvisButtonTrans, exportOptions: { columns: ':visible' } } ] }); $.fn.dataTable.ext.classes.sPageButton = ''; }); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> </body></html> |
This is the original HTTP response body.
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 | <script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript --> <script> /* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */ window._arachni_js_namespace = true; /* arachni_js_namespace_code_start */ /* arachni_js_namespace_code_stop */ </script> <!-- Injected by Arachni::Browser::Javascript --> <!DOCTYPE html> <html> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> <title>Appointments</title> <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" /> <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" /> <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" /> <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" /> <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" /> <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" /> </head> <body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show"> <header class="app-header navbar"> <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show"> <span class="navbar-toggler-icon"></span> </button> <a class="navbar-brand" href="#"> <span class="navbar-brand-full">Appointments</span> <span class="navbar-brand-minimized">Appointments</span> </a> <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show"> <span class="navbar-toggler-icon"></span> </button> <ul class="nav navbar-nav ml-auto"> </ul> </header> <div class="app-body"> <div class="sidebar"> <nav class="sidebar-nav"> <ul class="nav"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link"> <i class="nav-icon fas fa-fw fa-tachometer-alt"> </i> Dashboard </a> </li> <li class="nav-item nav-dropdown"> <a class="nav-link nav-dropdown-toggle" href="#"> <i class="fa-fw fas fa-users nav-icon"> </i> User management </a> <ul class="nav-dropdown-items"> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active"> <i class="fa-fw fas fa-unlock-alt nav-icon"> </i> Permissions </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link "> <i class="fa-fw fas fa-briefcase nav-icon"> </i> Roles </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link "> <i class="fa-fw fas fa-user nav-icon"> </i> Users </a> </li> </ul> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Services </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Employees </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Clients </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link "> <i class="fa-fw fas fa-cogs nav-icon"> </i> Appointments </a> </li> <li class="nav-item"> <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link "> <i class="nav-icon fa-fw fas fa-calendar"> </i> Calendar </a> </li> <li class="nav-item"> <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();"> <i class="nav-icon fas fa-fw fa-sign-out-alt"> </i> Logout </a> </li> </ul> </nav> <button class="sidebar-minimizer brand-minimizer" type="button"></button> </div> <main class="main"> <div style="padding-top: 20px" class="container-fluid"> <div class="card"> <div class="card-header"> Show Permissions </div> <div class="card-body"> <div class="mb-2"> <table class="table table-bordered table-striped"> <tbody> <tr> <th> ID </th> <td> 11 </td> </tr> <tr> <th> Title </th> <td> role_access </td> </tr> </tbody> </table> <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions"> Back to list </a> </div> <nav class="mb-3"> <div class="nav nav-tabs"> </div> </nav> <div class="tab-content"> </div> </div> </div> </div> </main> <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;"> <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B"> </form> </div> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script src="http://b3789e93786d.ngrok.io/js/main.js"> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> <script> // Injected by Arachni::Browser::Javascript _arachni_js_namespaceTaintTracer.update_tracers(); _arachni_js_namespaceDOMMonitor.update_trackers(); $(function() { let copyButtonTrans = 'Copy' let csvButtonTrans = 'CSV' let excelButtonTrans = 'Excel' let pdfButtonTrans = 'PDF' let printButtonTrans = 'Print' let colvisButtonTrans = 'Column visibility' let languages = { 'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json' }; $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' }) $.extend(true, $.fn.dataTable.defaults, { language: { url: languages['en'] }, columnDefs: [{ orderable: false, className: 'select-checkbox', targets: 0 }, { orderable: false, searchable: false, targets: -1 }], select: { style: 'multi+shift', selector: 'td:first-child' }, order: [], scrollX: true, pageLength: 100, dom: 'lBfrtip<"actions">', buttons: [ { extend: 'copy', className: 'btn-default', text: copyButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'csv', className: 'btn-default', text: csvButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'excel', className: 'btn-default', text: excelButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'pdf', className: 'btn-default', text: pdfButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'print', className: 'btn-default', text: printButtonTrans, exportOptions: { columns: ':visible' } }, { extend: 'colvis', className: 'btn-default', text: colvisButtonTrans, exportOptions: { columns: ':visible' } } ] }); $.fn.dataTable.ext.classes.sPageButton = ''; }); </script> <script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript --> </body> </html> |
It looks for the login form in the user provided URL, merges its input fields with the user supplied parameters and sets the cookies of the response and request as framework-wide cookies.
NOTICE: If the login form is by default hidden and requires a sequence of DOM interactions in order to become visible, this plugin will not be able to submit it.
Logged in successfully.
XSRF-TOKEN
eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9
laravel_session
eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9
Generates a simple list of safe/unsafe URLs.